Method & Apparatus for Remote Information Capture, Storage, and Retrieval

• US 20120173881A1
• Filed: 01/03/2011
• Published: 07/05/2012
• Est. Priority Date: 01/03/2011
• Status: Abandoned Application

• Current Assignee: Patient Always First
• Original Assignee: Patient Always First
• Inventors: Trotter, Frederick, Oliver, Carolyn, Hoffman, Leonard
• Application Number:
  US12/983,730
• Publication Number:
  US 20120173881A1
• Time in Patent Office: Days
• US Class Current: 713/189
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage

Abstract

The present disclosure relates to methods and systems that restrict access to stored sensitive information. Specifically, the methods and systems of the present disclosure separate the management of access to data from the encryption and storage of the data itself. The present disclosure allows for retrieval of the access without providing such access to the data host. Further, the present disclosure provides for data ownership privileges that can grant or revoke access. The present disclosure further provides for audio-access of stored data.

Claims

1. A method for managing data access comprising the steps of:

encrypting data for a user with a public key of said user;

storing said encrypted data;

encrypting a private key with an identifier associated with said user, said private key configured to decrypt said encrypted data;

storing said encrypted private key; and

deleting said private key subsequent to said step of encrypting said private key.

6. The method of claim 1 wherein said identifier comprises said user'"'"'s phone number.

7. The method of claim 1 wherein said identifier comprises said user'"'"'s directed identity.

10. The method of claim 1 wherein a portion of said encrypted data comprises audio data.

2. A method for managing data access comprising the steps of:

encrypting data for a first user with a file key;

encrypting said file key with a public key of said first user;

storing said encrypted data for said first user;

encrypting a private key with an identifier associated with said first user, said private key configured to decrypt said encrypted file key;

storing said encrypted private key; and

deleting said private key subsequent to said step of encrypting said private key.

3. The method of claim 2 further comprising the step of:

providing a second encrypted file key to a second user by encrypting said file key with a public key of said second user.

4. The method of claim 3, wherein said second encrypted file key may be deleted by said first user.

5. The method of claim 3 wherein a first portion of said encrypted data is encrypted with said file key.

8. The method of claim 2 wherein said identifier comprises said first user'"'"'s phone number.

9. The method of claim 2 wherein said identifier comprises said first user'"'"'s directed identity.

11. The method of claim 2 wherein a portion said encrypted data comprises audio data.

12. The method of claim 5 further comprising the step of:

creating a URL for at least said first portion of said encrypted data.

13. A system for managing data access comprising:

encrypted data for a first user, said data encrypted with a file key;

a first encrypted file key generated by encryption of said file key with a public key of said first user; and

an encrypted private key for said first user, said private key encrypted with an identifier associated with said first user,

wherein said system does not store said private key.

14. The system of claim 13 further comprising:

a second encrypted file key for a second user, said encrypted second file key generated by encryption of said file key with said second user'"'"'s public key.

15. The system of claim 14 wherein said second encrypted file key may be deleted by said first user.

16. The system of claim 14 wherein a first portion of said encrypted data is encrypted with said file key.

17. The system of claim 13 wherein said identifier comprises said first user'"'"'s phone number.

18. The system of claim 13 wherein said identifier comprises said first user'"'"'s directed identity.

19. The system of claim 13 wherein a portion of said encrypted data comprises audio data.

20. The system of claim 16 further comprising:

a URL for at least said first portion of said encrypted data.