METHOD AND SYSTEM FOR SECURE DATA STORAGE AND RETRIEVAL FROM CLOUD BASED SERVICE ENVIRONMENT

• US 20170004323A1
• Filed: 06/30/2015
• Published: 01/05/2017
• Est. Priority Date: 06/30/2015
• Status: Active Grant

• Current Assignee: Siemens AG
• Original Assignee: Bijesh Balachandran
• Inventors: Balachandran, Bijesh, Nair, Ranjith
• Granted Patent: US 10,509,768 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 16/13 File access structures, e.g. distributed indices arrangements of input from, or output to, record carriers G06F3/06
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself

Abstract

A method for secure storage of data and retrieval of desired data from a cloud-based service environment includes receiving the data from a tenant having a unique tenant ID, dynamically extracting data to be indexed from the received data, and creating index information from the extracted data. The index information is encrypted with a tenant private key, the encrypted index information is uploaded into the cloud environment in the form of index files, and a last uploaded index file is queried for in the cloud environment. The encrypted index information of the index file is decrypted with the tenant private key, the decrypted index information is searched for a relevant patient record, and the corresponding desired data is retrieved from the cloud environment. The desired data is rendered onto a client application. The index files are created from the index information in chronological order of receipt of the data.

Claims

1. A method for secure storage of data and retrieval of desired data from a cloud based service environment, the method comprising:

receiving the data from at least one tenant;

dynamically extracting data to be indexed from the received data;

creating, by a processor, index information from the extracted data;

encrypting the index information with a tenant private key;

uploading the encrypted index information into the cloud based service environment in the form of index files;

querying for a last uploaded index file from the cloud based service environment;

decrypting the encrypted index information of the index file with the tenant private key;

searching the decrypted index information for a relevant patient record;

when the relevant patient record is not found, querying for an index file uploaded before the previously searched index file from the cloud based service environment until the relevant patient record is found;

retrieving the corresponding desired data from the cloud based service environment; and

rendering the desired data on to a client application,

wherein the index files are created from the index information in chronological order of receipt of the data.

2. The method of claim 1, wherein the data is protected health information.

3. The method of claim 1, wherein the index file is tenant specific.

4. The method of claim 1, wherein each index file is time stamped.

5. The method of claim 1, wherein the creating of the index information occurs in an offline state.

6. The method of claim 1, wherein the index file has a threshold.

7. The method of claim 1, wherein the creating of the index information comprises compressing the index information.

8. The method of claim 1, wherein the index information comprises fields related to patient identification.

9. The method of claim 1, wherein the index file has a flat file structure.

10. The method of claim 1, wherein the corresponding desired data is retrieved from the cloud based service environment using a serial number.

11. The method of claim 1, wherein the tenant has a unique tenant ID.

12. A system for secure storage of data and retrieval of desired data from a cloud based service environment, the system comprising:

a receiver module configured to receive data from a tenant;

a processor configured to;

create index information from the data; and

encrypt the index information with a tenant private key;

a cloud based service environment configured to store the data and the encrypted index information;

a client application configured to query, decrypt, retrieve and render the desired data.

13. The system of claim 12, wherein the client application runs on a web browser.

14. The system of claim 12, wherein the receiver module comprises a memory unit.

15. The system of claim 12, wherein the client application comprises a cache memory.