DATA SECURITY SYSTEM AND METHOD

• US 20170243267A1
• Filed: 08/11/2015
• Published: 08/24/2017
• Est. Priority Date: 08/12/2014
• Status: Active Grant

• Current Assignee: Jewel Aviation And Technology Limited
• Original Assignee: Jewel Aviation And Technology Limited
• Inventors: LAMBERTON, Christopher Anthony
• Granted Patent: US 10,762,543 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06Q 20/202 Interconnection or interaction of plural electronic cash registers [ECR] or to host computer, e.g. network details, transfer of information from host to ECR or from ECR to ECR
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography postage metering system using cryptography G06Q2250/05
• CPC Class Codes: G06Q 30/0609 Buyer or seller confidence or verification
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/0478 applying multiple layers of encryption, e.g. nested tunnels or encrypting the content with a first key and then with at least a second key cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

A system and method are disclosed for secure storage of customer'"'"'s public and private data in a personal data store. Companies communicate with a secure data storage server using a public encryption key linked to a registered IP Address, customers communicate with a private encryption key, and encrypted data can be stored using a variety of encryption keys. The personal data store can be used for preparing customer product views, linking personal data to avoid repeated customer data entries, customer identification and loyalty card linking. Encrypted stored data ensures no other person can read it.

Claims

1. A system, including a network allowing bidirectional communication there through, the system comprising:

a secure data storage server including a personal data store for storing user personal data and user private data relating to the user, the secure status storage server being able bidirectionally to communicate with at least one client device and at least one service provider client;

wherein the at least one service provider client communicates with the secure data storage server with data encrypted using a first encryption key;

wherein the at least one client device communicates with the secure data storage server with data encrypted using a second encryption key;

wherein the at least one service provider client stores private data in the personal data store encrypted using a third encryption key; and

wherein the at least one client device stores personal data in the personal data store encrypted using a fourth encryption key.

2. The system according to claim 1, wherein the first encryption key is a dedicated company communications encryption key.

3. The system according to claim 1, wherein the second encryption key is a dedicated customer encryption key.

4. The system according to claim 1, wherein the third encryption key is the first encryption key.

5. The system according to claim 1, wherein the fourth encryption key is the second encryption key.

6. The system according to claim 1, wherein the second encryption key is a company private encryption key.

7. The system according to claim 1, wherein the fourth encryption key is a customer private data encryption key.

8. The system according to claim 1, wherein the at least one service provider client accesses the personal data store only from a previously registered IP address.

9. The system according to claim 1 wherein the at least one service provider client alone has rights to access and change data that at least one service provider client provides.

10. The system according to claim 1, wherein the secure data storage server comprises a crypt app server operable to cooperate with a client device, the crypt app server communicating, when used, with the secured data storage server to provide services.

11. The system according to claim 10 further comprising a context data store operable to store results from the crypt app server.

12. The system according to claim 10, wherein the secure data storage server is operable to compare personal data with private data to assemble a single customer view wherein all company private data is assembled and can be displayed for an individual customer.

13. The system according to claim 12, wherein the compared private data is from a single service provider client.

14. The system according to claim 10, wherein a customer contacts the app server to link a service provider client supportable product to that customer, the service provider client then using the customers individual public data to verify the customer'"'"'s identity and then to store contact information in the private data store to enable the customer to contact the service provider client company with contact history.

15. The system according to claim 14, wherein the customer can place a call to the app server and the app server is operable to cause the contact information to be retrieved and the call automatically to be correctly relayed to the service provider client company at the same time causing the contact history to be made visible to the respondent at the service provider client company.

16. The system according to claim 10 wherein, when the customer uses the client device to contact the app server to seek purchase of a service from a service provider client company, the service provider client company accesses the customers public data to fill a validation template before accepting or rejecting the customer for sale or offer of a product.

17. The system according to claim 16, wherein the service provider client company, if the particular requirements for customer validation are not met, requests further data from the customer, satisfactory provision where of allows progress towards sale or offer of the product.

18. The system according to claim 1, wherein:

a point of sale terminal is able to be coupled to the secure data storage server;

a client device is operable to transfer data to the point of sale terminal identifying a customer; and

the point of sale terminal is operable to transfer customer identifying data to the secure data storage server for the customer'"'"'s identity to be verified.

19. The system according to claim 18, wherein the client device is operable to transfer data to the point of sale terminal by at least one of:

near field transmission; and

optical imaging of an image displayed on a display on the client device.

20. The system according to claim 19, wherein the optical image is a one-dimensional or two dimensional barcode giving customer identification information.

21. (canceled)

22. A method, including employing a network allowing bidirectional communication there through, the method comprising the steps of:

a step of providing a secure data storage server including a personal data store for storing user public personal data and user private data relating to the user, the secure status storage server being enabled bidirectionally to communicate with at least one client device and at least one service provider client;

a step of the at least one service provider client communicating with the secure data storage server with data encrypted using a first encryption key;

a step of the at least one client device communicating with the secure data storage server with data encrypted using a second encryption key;

a step of the at least one service provider client storing private data in the personal data store encrypted using a third encryption key; and

a step of the at least one client device stores personal data in the personal data store encrypted using a fourth encryption key.

23. The method according to claim 22, wherein the first cryption key is a dedicated company communications encryption key.

24. The method according to claim 22, wherein the second encryption key is a dedicated customer encryption key.

25. The method according to claim 22, wherein the third encryption key is the first encryption key.

26. The method according to claim 22, wherein the fourth encryption key is the second encryption key.

27. The method according to claim 22, wherein the second encryption key is a company private encryption key.

28. The method according to claim 27, wherein the fourth encryption key is a customer private data encryption key.

29. The method according to claim 22, wherein the step of the at least one service provider client accessing the personal data store only from a previously registered IP address.

30. The method according to claim 22, wherein the at least one service provider client alone has rights to access and change data the at least one service provider client provides.

31. The method according to claim 22 including the steps of:

a step of providing, in the secure data storage server, a crypt app server for cooperating with a client device,

a step of connecting the crypt app server with the secured data storage server to provide services.

32. The method according to claim 31 further comprising a context data store operable to store results from the crypt app server.

33. The method according to claim, 30 wherein the secure data storage server is operable to compare personal data with private data to assemble a single customer view wherein all company private data is assembled and can be displayed for an individual customer.

34. The method according to claim 33, wherein the compared private data is from a single service provider client.

35. The method according to claim 31 including the steps of:

a step of a customer contacting the app server to link a service provider client supportable product to that customer; and

a step of the service provider client then using the customers individual public data to verify the customer'"'"'s identity and then storing contact information in the private data store to enable the customer to contact the service provider client company with contact history.

36. The method according to claim 34 including the steps of:

a step of the customer can placing a call to the app server;

a step of the app server is causing contact information to be retrieved; and

a step automatically relaying to the service provider client company and at the same time causing the contact history to be made visible to the respondent at the service provider client company.

37. The method according to claim 31 including the steps:

when the customer uses the client device to contact the app server to seek purchase of a service from a service provider client company, a step of the service provider client company accessing the customers public data to fill a validation template before accepting or rejecting the customer for sale or offer of a product.

38. The method according to claim 37 including the steps of:

a step of the service provider client company, if the particular requirements for customer validation are not met, requesting further data from the customer; and

a step of allowing progress towards sale if the received requested data is satisfactory.

39. The method according to claim 22 including the steps of:

a step of a point of sale terminal coupling to the secure data storage server;

a step of a client device transferring data to the point of sale terminal identifying a customer; and

a step of the point of sale terminal transferring the customer identifying data to the secure data storage server for the customer'"'"'s identity to be verified.

40. The method according to claim 39 including at least one of the steps of:

a step of the client device is operable to transfer data to the point of sale terminal by at least one of;

near field transmission; and

a step of optically imaging an image displayed on a display on the client device.

41. The method according to claim 40, wherein the optical image is one of:

a one-dimensional barcode giving customer identification; and

a two dimensional barcode giving customer identification information.

42. (canceled)