ENCRYPTION / DECRYPTION OF DATA WITH NON-PERSISTENT, NON-SHARED PASSKEY

• US 20140355757A1
• Filed: 02/05/2014
• Published: 12/04/2014
• Est. Priority Date: 02/06/2013
• Status: Active Grant

• Current Assignee: Aditya Shrivastava, Apurva Shrivastava
• Original Assignee: Aditya Shrivastava, Apurva Shrivastava
• Inventors: Shrivastava, Apurva, Shrivastava, Aditya
• Granted Patent: US 9,485,096 B2
• Time in Patent Office: Days
• US Class Current: 380/46
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/0863 involving passwords or one-time passwords network architectures or network communication protocols for using one-time keys in a packet data network H04L63/067
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms

Abstract

The method herein teaches encrypting a Private Key using a Passkey from an RSA generated private key/public key pair; the encrypted Private Key is split and then the portions are stored in two different databases. To encrypt data a new AES key is created that encrypts the data that is stored in another database. All users have their AES key encrypted using their associated public encryption keys such that the encrypted AES keys are stored in another database. To decrypt data the user enters his PassKey that is used to decrypt a rejoined split private key from portions that were retrieved from their respective databases. Next the encrypted AES key is retrieved and decrypted using the decrypted Private Key. Finally the AES encrypted data is retrieved from a database and decrypted using the decrypted AES key.

Claims

1. A method of creating a Public Key/Private Key pair in an electronic device having a dedicated encryption decryption application comprising the steps of:

receiving a PassKey entered by a user;

creating a Public Key/Private Key Pair; and

encrypting the Private Key using the Passkey.

2. The method of creating a Public Key/Private Key pair in an electronic device having a dedicated encryption decryption application of claim 1, further comprising the step of:

splitting the encrypted Private Key into two portions.

3. The method of creating a Public Key/Private Key pair in an electronic device having a dedicated encryption decryption application of claim 2, further comprising the step of:

storing the first encrypted portion of the Private Key in a first database.

4. The method of creating a Public Key/Private Key pair in an electronic device having a dedicated encryption decryption application of claim 3, further comprising the step of:

storing the second encrypted portion of the Private Key in a second database.

5. A data encryption process comprising the steps of:

receiving data entered by a user;

generating a random key;

encrypting data using the random key;

storing the encrypted data in a database;

encrypting the random key using a public encryption key;

storing the public encryption key encrypted random key in a database.

6. The data encryption process of claim 5, further comprises the steps of

repeating the process for a plurality of users thereby creating a plurality of random keys encrypted by the individual users'"'"' public encryption keys for storage in the database.

7. The data encryption process of claim 5, wherein the public encryption key further comprises a public encryption key created by a Public Key/Private Key process that produces a Split Private Key that is split into at least two portions.

8. A method of decrypting encoded data comprising the steps of:

receiving a user entered PassKey;

retrieving a first portion of a Split Private Key from a first database; and

retrieving a second portion of a Split Private Key from a second database.

9. The method of decrypting encoded data of claim 8, further comprising the step of:

joining the first and second portion of a Split Private Key.

10. The method of decrypting encoded data of claim 9, further comprising the step of:

decrypting the joined Private Key using the user PassKey resulting in a decrypted user Private Key.

11. The method of decrypting encoded data of claim 10, further comprising the step of:

retrieving an associated public key encrypted random key;

12. The method of decrypting encoded data of claim 11, further comprising the step of:

decrypting the associated public key encrypted random key using the decrypted user Private Key.

13. The method of decrypting encoded data of claim 12, further comprising the step of:

retrieving encoded data from a database.

14. The method of decrypting encoded data of claim 13, further comprising the step of:

decrypting the encoded data using the decrypted random key.