SYSTEM AND METHOD FOR SECURE DATA STORAGE

• US 20080104709A1
• Filed: 09/29/2006
• Published: 05/01/2008
• Est. Priority Date: 09/29/2006
• Status: Abandoned Application

• Current Assignee: Sage Payment Solutions
• Original Assignee: Verus Card Services
• Inventors: Morabito, John, Bennett, Bob, Schmid, Bob, AVERYT, Kelton, Henderson, Martin
• Application Number:
  US11/537,260
• Publication Number:
  US 20080104709A1
• Time in Patent Office: Days
• US Class Current: 726/27
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction

Abstract

A system and method for secure data storage is provided. A host system sends data to a secure storage processor where it is encrypted, stored, and a globally unique identifier is transmitted to the host system. The globally unique identifier is associated with the stored encrypted data and can be used in future interactions with the secure storage processor, such as a transaction request. A host system will transmit a transaction request and a globally unique identifier to the secure storage processor. The secure storage processor will process the transaction utilizing the stored encrypted data associated with the globally unique identifier, and will transmit a response indicating the failure or success of the transaction. In addition, the system is configured to facilitate information retrieval, wherein the secure storage processor sends the stored encrypted data to a requesting host system.

Claims

1. A method of securely receiving, encrypting, and storing encrypted data comprising:

transmitting data from a host system to a secure storage processor;

receiving the data from the host system at a secure storage processor;

encrypting the data;

storing the encrypted data on the secure storage processor;

transmitting a globally unique identifier, identifying the stored encrypted data, from the secure storage processor to the host system; and

storing the globally unique identifier received from the secure storage processor on the host system.

2. The method of claim 1, wherein the receiving step further comprises:

receiving an identification number and access key, wherein the identification number identifies the host system; and

examining the access key to determine whether the access key matches the identification number prior to storing the encrypted data.

3. The method of claim 2, wherein the receiving step further comprises at least two separate storage requests.

4. The method of claim 2, wherein the stored encrypted data is financial information.

5. The method of claim 2, wherein the stored encrypted data is personal information.

6. The method of claim 4, wherein the financial information is credit or debit card information.

7. The method of claim 4, wherein the financial information is automated clearing house data, bank account data, or checking data.

8. The method of claim 4, wherein the financial information is electronic funds transfer data or automated teller machine data.

9. The method of claim 5, wherein the personal information is social security information.

10. The method of claim 5, wherein the personal information is health insurance information.

11. A method for securely storing data comprising:

receiving data from a host system;

encrypting the data;

storing the encrypted data; and

transmitting a globally unique identifier identifying the stored encrypted data to the host system.

12. A method for processing securely stored data comprising:

receiving a request to process a transaction from a host system, wherein the request includes a globally unique identifier associated with stored encrypted data in a secure storage processor;

processing the transaction; and

returning a response to the host system indicating a status of the transaction.

13. The method of claim 12, wherein the transaction is a financial transaction and the stored encrypted data is financial information.

14. The method of claim 12, wherein the transaction is a personal information transaction wherein the stored encrypted data is personal information.

15. The method of claim 13, wherein the financial information is credit card or debit card data.

16. The method of claim 13, wherein the financial information is automated clearing house data, bank account data, or checking data.

17. The method of claim 13, wherein the financial information is electronic funds transfer data or automated teller machine data.

18. The method of claim 14, wherein the personal information is social security information.

19. The method of claim 14, wherein the personal information is health insurance information.

20. A method for retrieving securely stored data comprising:

receiving a request to retrieve securely stored encrypted data from a host system, wherein the request includes a globally unique identifier associated with the stored encrypted data in a secure storage processor;

retrieving the securely stored encrypted data associated with the globally unique identifier;

decrypting the stored encrypted data; and

returning a response to the host system, wherein the response indicates a status of the request to retrieve securely stored data, and the stored encrypted data in decrypted form, if the requested data is successfully retrieved.

21. A method for processing securely stored data comprising:

receiving a user request to perform a credit card transaction with credit card data;

transmitting the credit card data from a host system to a secure storage processor;

receiving the credit card data from the host system at a secure storage processor;

encrypting the credit card data;

storing the encrypted credit card data on the secure storage processor;

transmitting a globally unique identifier identifying the encrypted credit card data from the secure storage processor to the host system;

storing the globally unique identifier received from the secure storage processor on the host system;

receiving a request to process the credit card transaction from the host system, wherein the request includes a globally unique identifier associated with the encrypted credit card data stored in the secure storage processor;

processing the credit card transaction; and

returning a response to the host system indicating to the user a status of the credit card transaction.

22. A method of securely storing data comprising:

transmitting data to a secure storage processor;

receiving a globally unique identifier identifying the stored encrypted data from the secure storage processor; and

storing the globally unique identifier received from the secure storage processor.

23. The method of claim 22, wherein the transmitting step further comprises transmitting an identification number and an access key to the secure storage processor.

24. A system for securely storing data comprising:

a host system; and

a secure storage processor connected to the host system via a network, wherein the secure storage processor is configured to receive data from the host system, encrypt the received data, store the data, and transmit a globally unique identifier identifying the stored encrypted data to the host system.

25. The system of claim 24, wherein the secure storage processor may be further configured to receive an identification number and/or username and a* access keys and/or passwords, whereby the identification number identifies the host system.

26. The system of claim 24, wherein the secure storage processor may be further configured to examine the access key to determine whether the access key matches the identification number prior to storing the encrypted data.

27. A system for processing securely stored data comprising:

a host system; and

a secure storage processor connected to the host system via a network, wherein the secure storage processor is configured to receive a request to process a transaction and a globally unique identifier associated with stored encrypted data in the secure storage processor from the host system, process the transaction, and return a response to the host system indicating the status of the transaction.