Portable storage device for storing and accessing personal data

• US 20050055560A1
• Filed: 11/22/2002
• Published: 03/10/2005
• Est. Priority Date: 11/22/2001
• Status: Active Grant

• Current Assignee: Liberate Software Limited
• Original Assignee: Liberate Software Limited
• Inventors: Kendon, Michael
• Granted Patent: US 7,797,546 B2
• Time in Patent Office: Days
• US Class Current: 713/189
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16H 10/65 stored on portable record carriers, e.g. on smartcards, RFID tags or CD

Abstract

A method of securely storing and accessing personal data (26) relating to an individual (28), said personal data constituting a personal data record, is described. The method comprises: coupling a portable data storage device (42) to a computing device (12) for data transfer between them, the storage device carrying an encrypted personal data record (38) and a decryption means (40) for decrypting the personal data record upon provision of a key (36) not stored on the storage device (42); accessing the personal data record on the storage device (42) and running the decryption means (40) on the computing device (12) to decrypt the personal data record upon input of the key (36) to the computing device; and displaying the decrypted personal data (26) by means of the computing device.

Claims

1. A method of securely storing and accessing personal data relating to an individual, said personal data constituting a personal data record, the method comprising:

coupling a portable data storage device to a computing device for data transfer between them, the storage device carrying an encrypted personal data record and decryption logic for decrypting the personal data record upon provision of a key not stored on the storage device;

accessing the personal data record on the storage device and running the decryption logic on the computing device to decrypt the personal data record upon input of the key to the computing device; and

displaying the decrypted personal data by means of the computing device.

45. The method of claim 1, wherein the personal data is displayed in read-only form.

46. The method of claim 1, wherein the encrypted personal data includes at least one address of a remote data storage facility accessible via the computing device, which, when decrypted by the decryption logic, enables the computing device to address encrypted additional personal data held at the addressed remote data storage facility.

47. The method of claim 46, wherein the encrypted personal data further includes at least one access code which, when decrypted by the decryption logic, enables access to the encrypted additional personal data held by the addressed remote data storage facility.

48. The method of claim 46, comprising running the decryption means on the computing device using the key input to the computing device to decrypt the encrypted additional personal data, and displaying the decrypted additional personal data on the computing device.

49. The method of claim 46, further comprising writing encrypted additional personal data from the remote data storage facility to the portable data storage device via the computing device.

50. The method of claim 46, preceded by uploading personal data to the remote data storage facility and encrypting that data to become the encrypted additional personal data.

51. The method of claim 50, comprising updating the personal data stored on the portable data storage device by issuing a replacement portable data storage device to a user bearing encrypted personal data that includes encrypted additional personal data.

52. The method of claim 51, comprising checking a date or identity code held by a portable data storage device and preventing access to the personal data stored on the portable data storage device if the date or identity code indicates that access should no longer be allowed because that portable data storage device is out of date or has been superseded.

53. The method of claim 46, comprising uploading encrypted personal data to the remote data storage facility via the computing device.

54. The method of claim 46, comprising issuing a further portable data storage device to a third party bearing an encrypted address of the remote data storage facility which, when decrypted, enables access via the computing device to data held at the addressed remote data storage facility.

55. The method of claim 54, wherein the further portable data storage device also bears an encrypted access code which, when decrypted, enables access to the data held at the addressed remote data storage facility.

56. The method of claim 55, wherein the access code enables access to a specific level of data deemed appropriate to the third party that receives the further portable storage device, by correlation with a security level indicator attached to each record within the remote data storage facility.

57. The method of claim 54, comprising separately issuing a key to the third party enabling decryption of the address.

58. The method of claim 55, comprising separately issuing a key to the third party enabling decryption of the access code.

59. The method of claim 54, comprising recording and auditing third-party access to the addressed remote data storage facility.

60. The method of claim 1, wherein the portable data storage device also carries unencrypted personal data for display without decryption when the portable data storage device has been coupled to the computing device.

61. The method of claim 1, wherein the storage device is not capable of running the decryption means and displaying the personal data.

62. The method of claim 1, wherein the portable data storage device carries logic for launching a program on the computing device to display unencrypted or decrypted personal data when the portable data storage device has been coupled to the computing device.

63. The method of claim 1, wherein the portable data storage device carries personal data embedded in a page viewable, when unencrypted or decrypted, by an Internet browser running on the computing device.

82. A portable data storage device for use in the method of claim 1, the device carrying encrypted personal data and decryption logic for decrypting the personal data upon provision of a key not stored on the device, and being co-operable with a computing device to which the portable data storage device can be coupled for data transfer between them, whereby the computing device can access the personal data on the storage device, run the decryption logic to decrypt the personal data upon input of the key, and drive an associated display to display the decrypted personal data.

83. The device of claim 82, wherein the personal data is embedded in a page viewable, when unencrypted or decrypted, by an Internet browser running on the computing device.

84. The device of claim 83, wherein the decryption logic includes Javascript code for decrypting encrypted pages.

85. The device of claim 82 and further including logic for addressing and accessing a remote storage facility via the computing device to enable the computing device to address encrypted additional personal data held at the addressed remote data storage facility.

86. The device of claim 82 and further including a date or identity code for checking to prevent access to the personal data if the code indicates that access should no longer be allowed because that device is out of date or has been superseded.

87. The device of claim 82 and also carrying unencrypted personal data for display without decryption when the portable data storage device has been coupled to the computing device.

88. The device of claim 82 and not being capable of running the decryption logic and displaying the personal data.

89. The device of claim 82 and also carrying logic for launching a program on the computing device to display unencrypted or decrypted personal data when the device has been coupled to the computing device.

2-44. -44. (Cancelled)

64. A system for securely storing and accessing personal data relating to an individual, said personal data constituting a personal data record, the system comprising:

a portable data storage device carrying an encrypted personal data record and decryption logic for decrypting the personal data upon provision of a key not stored on the storage device;

a computing device to which the portable data storage device can be coupled for data transfer between them, the computing device including logic for accessing the personal data record on the storage device, and logic for running the decryption logic to decrypt the personal data record upon input of the key to the computing device; and

a display associated with the computing device for displaying the decrypted personal data.

65. The system of claim 64, wherein the portable data storage device includes logic for addressing and accessing a remote storage facility via the computing device to enable the computing device to address encrypted additional personal data held at the addressed remote data storage facility.

66. The system of claim 64, wherein the computing device includes logic for running the decryption logic using the key input to the computing device to decrypt the encrypted additional personal data, and logic for displaying the decrypted additional personal data.

67. The system of claim 65, wherein the remote data storage facility includes logic for writing encrypted additional personal data to the portable data storage device via the computing device.

68. The system of claim 65, further comprising logic for uploading personal data to the remote data storage facility and means for encrypting that data to become the encrypted additional personal data.

69. The system of claim 68, further comprising logic for updating the personal data stored on the portable data storage device by issuing a replacement portable data storage device to a user bearing encrypted personal data that includes encrypted additional personal data.

70. The system of claim 69, comprising logic for checking a date or identity code held by a portable data storage device and logic for preventing access to the personal data stored on the portable data storage device if the date or identity code indicates that access should no longer be allowed because that portable data storage device is out of date or has been superseded.

71. The system of claim 65, comprising logic for uploading encrypted personal data to the remote data storage facility via the computing device.

72. The system of claim 65, comprising a further portable data storage device issued to a third party bearing an encrypted address of the remote data storage facility which, when decrypted, enables access via the computing device to data held at the addressed remote data storage facility.

73. The system of claim 72, wherein the further portable data storage device also bears an encrypted access code which, when decrypted, enables access to the data held at the addressed remote data storage facility.

74. The system of claim 72, comprising data access logic for enabling access to a specific level of data deemed appropriate to the third party that receives the further portable storage device, by correlation with a security level indicator attached to each record within the remote data storage facility.

75. The system of claim 72, comprising a key separately issued to the third party enabling decryption of the address.

76. The system of claim 73, comprising a key separately issued to the third party enabling decryption of the access code.

77. The system of claim 72, comprising logic for recording and auditing third-party access to the addressed remote data storage facility.

78. The system of claim 64, wherein the portable data storage device also carries unencrypted personal data for display without decryption when the portable data storage device has been coupled to the computing device.

79. The system of claim 64, wherein the storage device is not capable of running the decryption logic and displaying the personal data.

80. The system of claim 64, wherein the portable data storage device carries logic for launching a program on the computing device to display unencrypted or decrypted personal data when the portable data storage device has been coupled to the computing device.

81. The system of claim 64, wherein the portable data storage device carries personal data embedded in a page viewable, when unencrypted or decrypted, by an Internet browser running on the computing device.