System and method for securely storing electronic data

• US 6,970,836 B1
• Filed: 04/14/1999
• Issued: 11/29/2005
• Est. Priority Date: 04/14/1998
• Status: Expired due to Term

• Current Assignee: Citicorp Credit Services Incorporated (Citigroup Incorporated)
• Original Assignee: Citicorp Development Center Incorporated (Citigroup Incorporated)
• Inventors: Ezrol, Lisa, Takata, Melvin Michio, Lichstein, Henry, Golvin, Charles, Paltenghe, Cris T., Mamdani, Alnoor B.
• Primary Examiner(s): NORMAN, MARC E
• Application Number:
  US09/291,294
• Time in Patent Office: 2,421 Days
• Field of Search: 705/17, 705/18, 705/53, 705/51, 705/67, 380/277, 380/286
• US Class Current: 705/18
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/363 with the personal data of a user
• CPC Class Codes: G06Q 20/389 Keeping log of transactions for guaranteeing non-repudiation of a transaction
• CPC Class Codes: G07F 7/0866 by active credit-cards adapted therefor G07F7/1008 takes precedence

Abstract

A system and method for securely storing data provides for storing, managing, and updating an owner'"'"'s secret data and for accessing the stored data by a trusted third party upon the occurrence of an event, such as the death of the owner. The system and method makes use of application software, such as a virtual wallet running at least in part on the server of a trusted third party and with a virtual executor function and a virtual archivist function. The virtual executor function automatically escrows a trusted third party'"'"'s access aspect of the owner'"'"'s secret device for accessing the stored data. Upon verification of the occurrence of the event, the virtual executor provides access to the stored data using the trusted third party'"'"'s access aspect. The virtual archivist function automatically updates technologies related to the stored data.

Claims

1. A method for securely storing data for an owner, comprising:

storing the data for the owner consisting at least in part of information relating to the owner'"'"'s estate by entering the data on a virtual wallet application for the owner, the virtual wallet application having a local aspect residing on a terminal of the owner and a remote aspect residing on a server of a trusted third party coupled to the terminal via a network, the virtual wallet application also having a virtual executor function, and the virtual wallet application also being configured at least in part for storing data representing at least one of a payment mechanism and electronic funds;

automatically assigning a primary aspect of a secret access device for the virtual wallet application to the owner by the virtual wallet application for accessing the stored data;

automatically escrowing a secondary aspect of the secret access device for the virtual wallet application by the virtual executor function conditioned on the occurrence of an event that renders the owner incapable of acting on the owner'"'"'s own behalf;

periodically updating the remote aspect of the virtual wallet application with the data stored on the local aspect by a virtual archivist function of the virtual wallet application via the network;

periodically reformatting the data stored on the remote aspect of the virtual wallet application by the virtual archivist function to conform to succeeding methods of accessing the stored data;

receiving verification of the occurrence of the event by the trusted third party from a personal representative of the owner upon the occurrence of the event; and

accessing the stored data by the trusted third party on behalf of the owner'"'"'s personal representative with the escrowed secret access device.

2. The method of claim 1, wherein entering the data further comprises entering the data by the owner at the terminal.

3. The method of claim 1, wherein the terminal further comprises a personal computer.

4. The method of claim 1, wherein the trusted third party'"'"'s server further comprises a financial institution server.

5. The method of claim 4, wherein the financial institution further comprises a bank.

6. The method of claim 1, wherein the network further comprises a private network.

7. The method of claim 1, wherein the network further comprises a public network.

8. The method of claim 7, wherein the public network further comprises the internet.

9. The method of claim 1, wherein entering the data further comprises entering the data on the local aspect of the virtual wallet application residing on the terminal.

10. The method of claim 1, wherein storing the data further comprises storing at least one category of information by the virtual wallet application for the owner selected from a group of information consisting of identification information, authentication information, certificate information, access key information, PIN number information, credit card account information, debit card information, bank account information, and other personal information.

11. The method of claim 1, wherein automatically assigning the primary aspect of the secret access device further comprises automatically assigning the primary aspect of the secret access device to the owner at the terminal.

12. The method of claim 11, wherein automatically assigning the primary aspect of the secret access device further comprises automatically assigning the primary aspect of the secret access device by the remote aspect of the virtual wallet application residing on the server coupled to the terminal.

13. The method of claim 12, wherein the terminal further comprises a personal computer.

14. The method of claim 12, wherein automatically assigning the primary aspect of the secret access device further comprises automatically sending information about the secret access device to the owner at the terminal coupled to the server over the network.

15. The method of claim 14, wherein the network further comprises a private network.

16. The method of claim 14, wherein the network further comprises a public network.

17. The method of claim 16, wherein the public network further comprises the internet.

18. The method of claim 1, wherein automatically escrowing the secondary aspect of the secret access device further comprises automatically storing at least one type of secret access information selected from a group of secret access information consisting of identification information, authentication information, certificate information, access key information, PIN number information, and password information.

19. The method of claim 1, wherein automatically escrowing the secondary aspect of the secret access device further comprises automatically escrowing decryption infrastructure for the owner.

20. The method of claim 19, wherein automatically escrowing decryption infrastructure further comprises automatically storing at least one decryption infrastructure selected from a group of decryption infrastructure consisting of public key cryptography infrastructure, electronic document infrastructure, digital signature infrastructure, user name infrastructure, password infrastructure, fingerprint scanner infrastructure, and secret key infrastructure.

21. The method of claim 1, further comprising automatically updating technology aspects of the stored data.

22. The method of claim 21, wherein automatically updating the technology aspects further comprises automatically updating technology aspects of the data by the virtual archivist function of the virtual wallet application.

23. The method of claim 22, wherein automatically updating the technology aspects further comprises automatically updating the technology aspects by the virtual archivist function of the virtual wallet application on the server of the trusted third party.

24. The method of claim 23, wherein the trusted third party further comprises a financial institution.

25. The method of claim 24, wherein the financial institution further comprises a bank.

26. The method of claim 23, wherein automatically updating the technology aspects further comprises automatically updating at least one technology aspect of the data selected from a group of technology aspects consisting of technology related to signing a document, encryption technology, technology related to a key for signing a document, technology related to a document itself, technology related to a certificate revocation list, technology related to a time stamp, and technology related to a notary stamp.

27. The method of claim 1, wherein storing the data further comprises receiving the data from another party by the virtual wallet application for the owner.

28. The method of claim 27, wherein receiving the data further comprises receiving the data by the virtual wallet application for the owner by electronic mail.

29. A method for securely storing data for an owner, comprising:

storing the data for the owner consisting at least in part of an electronic copy of the owner'"'"'s will on a virtual wallet application for the owner, the virtual wallet application having a local aspect residing on a terminal of the owner and a remote aspect residing on a server of a trusted third party coupled to the terminal via a network, the virtual wallet application also having a virtual executor function, and the virtual wallet application also being configured at least in part for storing data representing at least one of a payment mechanism and electronic funds;

automatically assigning a secret device to the owner for accessing the stored data on the virtual wallet application, wherein automatically assigning the secret device further comprises automatically assigning the secret device by the virtual wallet application with at least two access aspects comprising an owner'"'"'s access aspect and a trusted third party'"'"'s access aspect;

automatically escrowing the trusted third party'"'"'s access aspect by the virtual executor function of the virtual wallet application for the owner conditioned on the occurrence of an event comprising one of the owner'"'"'s death and the owner'"'"'s incompetence;

periodically updating the remote aspect of the virtual wallet application with the data stored on the local aspect by a virtual archivist function of the virtual wallet application via the network;

periodically reformatting the data stored on the remote aspect of the virtual wallet application by the virtual archivist function to conform to succeeding methods of accessing the stored data;

receiving verification of the occurrence of the event by the trusted third party from a personal representative of the owner upon the occurrence of the event; and

providing access to the stored data by the trusted third party for the owner'"'"'s personal representative with the trusted third party'"'"'s access aspect of the escrowed secret device.

30. The method of claim 29, wherein automatically assigning the owner'"'"'s access aspect further comprises automatically sending the owner'"'"'s access aspect to the owner.

31. The method of claim 29, wherein automatically escrowing the trusted third party'"'"'s access aspect further comprises automatically storing the trusted third party'"'"'s access aspect by the virtual executor function of the virtual wallet application on the server of the trusted third party.

32. The method of claim 31, wherein the trusted third party server further comprises a financial institution computer.

33. The method of claim 32, wherein the financial institution further comprises a bank.

34. A method for securely storing data for an owner, comprising:

storing the data for the owner consisting at least in part of information relating to the owner'"'"'s estate on a virtual wallet application residing at least in part on a trusted third party'"'"'s server and at least in part on the owner'"'"'s personal computer coupled to the server via a network, the virtual wallet application also being configured at least in part for storing data representing at least one of a payment mechanism and electronic funds;

automatically assigning a primary aspect of a secret device to the owner for accessing the stored data;

automatically escrowing a secondary aspect of the secret device by a virtual executor function of the virtual wallet application conditioned on the occurrence of an event consisting of one of the owner'"'"'s death and the owner'"'"'s incompetence;

periodically updating the part of the virtual wallet application residing on the trusted third party'"'"'s server with the data stored on the part of the virtual wallet application residing on the owner'"'"'s personal computer by a virtual archivist function of the virtual wallet application via the network;

periodically reformatting the data stored on the remote aspect of the virtual wallet application by the virtual archivist function to conform to succeeding methods of accessing the stored data;

receiving verification of the occurrence of the event by the virtual executor function from a personal representative of the owner via the trusted third party; and

providing access for the personal representative to the stored data with the escrowed secret device.

35. A system for securely storing data for an owner, comprising:

a terminal of the owner with a virtual wallet application having a local aspect residing thereon and a server of a trusted third party with a remote aspect residing thereon coupled to the terminal via a network and capable of storing the data consisting at least in part of information related to the owner'"'"'s estate for the owner, the virtual wallet application also being configured at least in part for storing data representing at least one of a payment mechanism and electronic funds, the virtual wallet application also having a virtual archivist function adapted for periodically updating the remote aspect of the virtual wallet application with the data stored on the local aspect via the network, and the virtual archivist function also being adapted for periodically reformatting the data stored on the remote aspect of the virtual wallet application to conform to succeeding methods of accessing the stored data;

wherein the virtual wallet application is adapted for automatically assigning a primary aspect of a secret access device for the virtual wallet application to the owner for accessing the stored data;

a virtual executor function of the virtual wallet application preprogrammed for automatically escrowing a secondary aspect of the secret access device for the virtual wallet application conditioned upon the occurrence of an event comprising one of the owner'"'"'s death and the owner'"'"'s incompetence, and upon receiving verification of the occurrence of the event via the trusted third party from a personal representative of the owner, for providing access to the stored data with the escrowed secondary aspect of the secret access device for the personal representative of the owner.

36. A method for securely storing data for an owner, comprising:

providing a virtual wallet application having a local aspect residing on a computing device of the owner and a remote aspect residing on a trusted third party'"'"'s server, the virtual wallet application also being configured at least in part for storing data representing at least one of a payment mechanism and electronic funds;

assigning a primary aspect of a secret access device to the owner by the virtual wallet application for accessing both aspects of the virtual wallet application by the owner via the computing device coupled to the server over a network;

escrowing a secondary aspect of the secret access device by a virtual executor function of the virtual wallet application preprogrammed to utilize the secondary aspect to allow access to the owner'"'"'s stored data only to an authorized representative of the owner'"'"'s estate upon verification of an occurrence of a predefined event that renders the owner incapable of acting on the owner'"'"'s own behalf;

allowing the owner at the computing device to store data consisting at least in part of information relating to the owner'"'"'s estate on the local aspect of the virtual wallet application;

periodically updating the remote aspect of the virtual wallet application with the data stored on the local aspect by a virtual archivist function of the virtual wallet application via the network;

periodically reformatting the data stored on the remote aspect of the virtual wallet application by the virtual archivist function according to conform to succeeding methods of accessing the stored data; and

if the occurrence of the predefined event is verified, allowing access for the authorized representative of the owner'"'"'s estate to the owner'"'"'s stored data by the virtual executor function utilizing the secondary aspect of the secret access device.