INFORMATION STORAGE SYSTEM

• US 20100146288A1
• Filed: 02/10/2010
• Published: 06/10/2010
• Est. Priority Date: 04/11/2002
• Status: Active Grant

• Current Assignee: Allan Endresz
• Original Assignee: Andrew Dominic Tune
• Inventors: Tune, Andrew Dominic
• Granted Patent: US 8,090,953 B2
• Time in Patent Office: Days
• US Class Current: 713/179
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/24 Credit schemes, i.e. "pay after"
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes

Abstract

A system for storing information having a predetermined use which requires the information to be secured. The information may comprise credit card details used to complete a transaction. The system includes: (a) A client system for storing an encoded version of the information and an identifier. The encoded version is generated from first data of the information and an encoded version of the second data of the information. The information can be generated from the first data and the second data, and the predetermined use is infeasible with only one of the first data and the second data. (b) A remote server for storing the second data and an encoded identifier generated from the identifier. The client system sends at least the encoded version of the second data to the remote server. The client system or the remote server is able to generate the information from the first data and the second data. Accordingly, only part of the information to be secured is stored locally on the client system, whilst the other part is stored on the remote server, and neither the client system nor the remote server have a record of the entire information.

Claims

1. A system for protecting digital data, including;

a first computer system for generating first data and second data from said digital data, such that said digital data can be generated from said first data and said second data, and use of said digital data is infeasible with only one of said first data and said second data, and for storing an identifier with said first data; and

a second computer system for storing said second data with an encoded identifier generated from said identifier.

2. A system as claimed in claim 1, wherein said second computer system is adapted to send an encoded version of said second data to said first computer system, and said first computer system is adapted to generate an encoded version of said digital data from said first data and said encoded second data, and to store the encoded digital data with said identifier.

3. A system as claimed in claim 2, including a remote hash generator for generating the encoded second data.

4. A system for protecting digital data, including:

a first computer system for storing an encoded version of said digital data and an identifier, the encoded digital data having been generated from first data of said digital data and an encoded version of second data of said digital data, wherein said digital data can be generated from said first data and said second data, and use of said digital data is infeasible with only one of said first data and said second data; and

a second computer system for storing said second data and an encoded identifier generated from said identifier;

wherein said first computer system is adapted to send at least the encoded version of the second data to said second computer system.

5. A system as claimed in claim 4, including a plurality of said second computer system, and a gateway for selecting at least one of the second computer systems, and for forwarding data received from said first computer system to the selected at least one second computer system.

6. A process, executed by a first computer system, for protecting digital data, including:

generating first data and second data from said digital data, such that said digital data can be generated from said first data and said second data, and use of said digital data cannot be performed using only one of said first data and said second data;

sending said first data to a second computer system for storage with an encoded identifier generated from an identifier; and

storing said second data with said identifier.

7. A process as claimed in claim 6, including generating encoded data from said digital data, wherein said first data and second data are generated from said encoded data.

8. A process as claimed in claim 7, wherein the quantity of said encoded data is substantially larger than quantity of said digital data.

9. A process as claimed in claim 7, wherein said step of generating includes encrypting said digital data.

10. A process as claimed in claim 6, wherein said first data and said second data are stored at respective locations physically remote from one another.

11. A process as claimed in claim 6, wherein said encoded identifier includes a cryptographic hash of said identifier.

12. A process as claimed in claim 11, wherein said hash is remotely generated using a hash function unknown to said first computer system and unknown to said second computer system.

13. A process as claimed in claim 6, including:

receiving an encoded version of said first data from said second computer system; and

generating an encoded version of said digital data from the encoded first data and said second data; and

wherein said step of storing includes storing the encoded digital data and said identifier.

21. A digital data storage system having components for executing the steps of any one of claims 6-20.

22. Computer-readable storage media having stored thereon program code for executing the steps of any one of claims 6-20.

14. A process for protecting digital data, including:

receiving an identifier and first data from a computer system having second data, said first data and said second data being such that said digital data can be generated from said first data and said second data, and use of said digital data cannot be performed using only one of said first data and said second data;

storing said first data with an encoded identifier generated from said identifier, without storing said identifier;

generating encoded first data from said first data; and

sending said encoded first data to said computer system for storage with said second data and said identifier.

15. A process for generating digital data, including:

determining, on the basis of an identifier, first data of said digital data;

sending said identifier to a computer system;

receiving second data of said digital data from said computer system, said second data determined on the basis of an encoded identifier generated from said identifier; and

generating said digital data from said first data and said second data, wherein use of said digital data is infeasible with only one of said first data and said second data.

16. A process as claimed in claim 15, including using said digital data for said use and then destroying said digital data.

17. A process for generating digital data according to claim 16, wherein said digital data represents a credit card number and said use includes processing a financial transaction on the basis of said credit card number.

18. A process for generating digital data, including:

receiving an identifier;

determining first data of said digital data on the basis of an encoded identifier generated from said identifier; and

sending said first data to a computer system to enable said digital data to be generated from said first data and second data of said digital data, wherein said use of said digital data is infeasible with only one of said first data and said second data.

19. A process for generating digital data, including;

determining, on the basis of an identifier, an encoded version of said digital data, the encoded digital data having been generated from first data of said digital data and an encoded version of second data of said digital data; and

sending said identifier and said encoded digital data to a computer system for generation of said digital data from said first data and said second data, wherein said use of said digital data is infeasible with only one of said first data and said second data.

20. A process, executed by a computer system, for generating digital data, including:

receiving an identifier and an encoded version of said digital data;

determining first data of said digital data on the basis of an encoded identifier generated from said identifier;

determining second data from an encoded version of said digital data;

generating said digital data from said first data and second data, wherein use of said digital data is infeasible with only one of said first data and said second data;

using said digital data; and

destroying said digital data.