Hidden link dynamic key manager for use in computer systems with database structure for storage of encrypted data and method for storage and retrieval of encrypted data

• US 7,362,868 B2
• Filed: 10/20/2000
• Issued: 04/22/2008
• Est. Priority Date: 10/20/2000
• Status: Expired due to Fees

• Current Assignee: Abdallah Farrukh, Central Valley Administrators
• Original Assignee: Eruces, Inc.
• Inventors: Madoukh, Ashraf, Khulusi, Bassam, Ansari, Suhail, Hu, Jinhui, Vasic, Ognjen
• Primary Examiner(s): Sheikh; Ayaz
• Assistant Examiner(s): Sherkat; Arezoo
• Application Number:
  US09/693,605
• Publication Number:
  US 20010019614A1
• Time in Patent Office: 2,741 Days
• Field of Search: 380/270, 380/30, 380/277, 705/54, 705/56, 709/225, 709/229, 713/165, 713/176
• US Class Current: 380/277
• CPC Class Codes: G06F 16/10 File systems; File servers
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2209/88 Medical equipments
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 9/16 the keys or algorithms being changed during operation
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3273 for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869

Abstract

A computer system (20) having a security domain (22), at least one client business domain (26), and a plurality of client terminals (34) utilizes a hidden link dynamic key manager (24, 84) and a database structure that includes encrypted data entities (30C, 30D) and a security identification attribute (32) for storage of encrypted data. Methods for encrypting data and for storing, decrypting, and retrieving encrypted data operate on the computer system (20), which also includes an information database (62) and a key database (44). The key database (44) is isolated from the information database (62). The hidden link key manager is stored in the security domain (22) and includes a system key manager (84) operable to generate system keys with system key common names and an encryption key manager (24) operable to generate encryption keys having encryption key identifications. The key managers (24, 84) operate on a key server (40), which is mirrored by a secondary key server (42). A general security manager (82) also operates on the key server (40) to control access to the security domain (22). The security information attribute (32) is stored with a persistent data entity (30A) that is associated with the other encrypted data entities (30C, 30D) by a database schema. The encryption key identification (112) for the encryption key used to encrypt the data entities (30C, 30D) is encrypted by a system key and then stored as part of the security information attribute (32). The system key common name hash value (114) is also stored in the security information attribute (32). The information data entities (30) are stored on the information database (62), but the encryption key identification (153), encryption key (154), system key common name hash value (156, 157), and system key common name (158) are stored in the key database (44) inside the security domain (22). The system key itself is stored on a Smart Card reader (56) inside the security domain.

Claims

1. A computer readable medium containing a database structure for storage of encrypted data, the database structure comprising:

at least one data entity encrypted by at least one encryption key, the data entity having at least one searchable attribute;

at least one encryption key identification stored in association with the data entity for identifying the encryption key, wherein the encryption key identification is encrypted by a system key; and

a system key common name also stored in association with the data entity for identifying the system key, wherein the system key common name is encrypted by a master key.

2. The computer readable medium according to claim 1 wherein the system key common name is hashed, and the database structure further comprises the system key common name hash value stored in association with the system key common name.

3. The computer readable medium according to claim 2 wherein the system key common name and the system key common name hash value are stored on a separate database from the at least one data entity.

4. The computer readable medium according to claim 1 wherein the at least one encryption key comprises a dynamic encryption key, and the at least one encryption key identification comprises a dynamic encryption key identification.

5. The computer readable medium according to claim 1 further comprising a plurality of data entities encrypted by a plurality of encryption keys, and a plurality of encryption key identifications.

6. The computer readable medium according to claim 5 wherein the plurality of encryption keys comprise dynamic encryption keys, and the plurality of encryption key identifications comprise dynamic encryption key identifications.

7. The computer readable medium according to claim 1 wherein the data structure further comprises a plurality of hash values with each of the searchable attributes having a corresponding hash value.

8. The computer readable medium according to claim 1 wherein the data structure further comprises at least one integrity attribute in association with the data entity.

9. The computer readable medium according to claim 1 wherein the data structure further comprises a security key attribute of the data entity, the security key attribute including the at least one encryption key identification and a system key common name.

10. The computer readable medium according to claim 1 further comprising a first database including the data entity and encryption key identification stored thereon and a second database including the encryption key stored thereon.

11. The computer readable medium according to claim 10 further comprising a security token including the system key stored thereon.

12. The computer readable medium according to claim 11 wherein the security token comprises a Smart Card reader.

13. The computer readable medium according to claim 1 wherein the at least one encryption key identification is stored as an attribute of the data entity.

14. The computer readable medium according to claim 1 wherein the data entity comprises a data object having a plurality of attributes.

15. The computer readable medium according to claim 1 further comprising a second data entity including as attributes the encryption key and the encryption key identification.

16. The computer readable medium according to claim 15 wherein the second data entity is stored on a separate isolated database from the at least one data entity.

17. The computer readable medium according to claim 1 further comprising a second data entity encrypted by a second encryption key, the second data entity having a second searchable attribute, and a second encryption key identification corresponding to the second encryption key;

and wherein the at least one encryption key comprises a first encryption key and the at least one encryption key identification comprises a first encryption key identification.

18. The computer readable medium according to claim 17 wherein the second encryption key identification is stored as an attribute of the second data entity.

19. The computer readable medium according to claim 17 wherein the first and second encryption key identifications are encrypted by a system key having a system key common name.

20. The computer readable medium according to claim 19 wherein the system key comprises a public system key.

21. The computer readable medium according to claim 19 further comprising the system key common name stored as an attribute of the first and second data entities.

22. The computer readable medium according to claim 17 wherein the first encryption key identification is encrypted by a first system key, and the second encryption key identification is encrypted by a second system key.

23. The computer readable medium according to claim 17 wherein the first and second data entities contain information for an individual customer.

24. The computer readable medium according to claim 23 wherein the first data entity contains medical patient name information, and the second data entity contains medical patient address information.

25. A computer readable data transmission medium containing a data structure for encrypted data, the data structure comprising:

at least one encryption key, the data entity having at least one searchable attribute;

at least one encryption key identification stored in association with the data entity and for identifying the encryption key, wherein the encryption key identification is encrypted by a system key; and

a system key common name also stored in association with the data entity for identifying the system key, wherein the system key common name is encrypted by a master key.

26. A method for storage and retrieval of encrypted data, the method comprising:

encrypting a data entity with an encryption key having an encryption key identification;

storing the encrypted data entity;

encrypting the encryption key identification with a system key having a system key common name;

encrypting the system key common name with a master key; and

storing the encrypted encryption key identification and the encrypted system key common name in association with the encrypted data entity.

27. The method according to claim 26 further comprising:

requesting a data manipulation using a searchable attribute;

searching for matches to the searchable attribute;

decrypting the system key common name using the master key;

searching for the system key using the system key common name;

decrypting the encryption key identification with the system key;

searching for the encryption key using the encryption key identification; and

decrypting the data entity with the encryption key.

28. The method according to claim 27 wherein requesting the data manipulation comprises requesting a data update of new information, and further comprising encrypting the new information with a second encryption key.

29. The method according to claim 27 wherein requesting the data manipulation comprises requesting an addition of new information, and further comprising encrypting the new information with a second encryption key.

30. The method according to claim 27 wherein requesting the data manipulation comprises requesting viewing of current information, and further comprising encrypting the viewed information with a second encryption key.

31. The method according to claim 26 further comprising storing the system key in a security token.

32. The method according to claim 26 wherein encrypting the encryption key identification with a system key comprises encrypting the encryption key identification with a system public key.

33. The method according to claim 32 further comprising decrypting the encryption key identification with a system private key.

34. The method according to claim 26 further comprising checking for expiration of the system key, and upon expiration of the system key, discontinuing use of the system key and generating and using a new system key.

35. The method according to claim 34 further comprising upon expiration of the system key, retaining the system key for decrypting previously encrypted encryption key identifications.

36. The method according to claim 26 further comprising hashing the system key common name to create a system key common name hash value, encrypting the system key common name hash value with the master key, and storing the encrypted system key common name and the encrypted system key common name hash value in association with the data entity.

37. The method according to claim 36 further comprising:

requesting a data manipulation using a searchable attribute;

searching for matches to the searchable attribute;

searching for the system key common name using the system key common name hash value;

searching for the system key using the system key common name;

decrypting the encryption key identification with the system key;

searching for the encryption key using the encryption key identification; and

decrypting the data entity with the encryption key.

38. The method according to claim 36 further comprising verifying the system key with a private certificate authority, and performing an integrity check on the system key.

39. The method according to claim 26 further comprising checking the encryption key for expiration.

40. The method according to claim 39 further comprising upon expiration of the encryption key, generating a new encryption key having an expiration date, retrieving data entities using the encryption key, decrypting the retrieved data entities with the encryption key, encrypting the retrieved data entities with the new encryption key, storing the retrieved data entities.

41. The method according to claim 26 further comprising hashing searchable attributes of the data entity to determine data entity attribute hash values and storing the data entity attribute hash values in association with the data entity.

42. The method according to claim 41 further comprising:

requesting a data manipulation using a searchable attribute;

hashing the searchable attribute to create a searchable attribute hash value;

searching for matches to the searchable attribute hash value;

decrypting the system key common name using the master key;

searching for the system key using the system key common name;

decrypting the encryption key identification with the system key;

searching for the encryption key using the encryption key identification; and

after retrieving the encryption key, decrypting the data entity with the encryption key.

43. The method according to claim 26 further comprising transmitting the data entity over a data transmission line, and wherein encrypting the data entity comprises encrypting only a portion of the data entity in accordance with a business rule.

44. The method according to claim 26 further comprising generating a new encryption key for each user session.

45. The method according to claim 26 further comprising generating a new encryption key for each user action.

46. The method according to claim 26 further comprising retrieving the encryption key from a separate database, and decrypting the data entity with the encryption key.

47. The method according to claim 26 further comprising auditing the encryption key for a desired event.

48. The method according to claim 26 wherein the data entity and encryption key identification are stored in a first database, and further comprising storing the encryption key in a second database.

49. The method according to claim 26 further comprising encrypting the encryption key identification with a system key having a system key common name, and maintaining the system key within a security domain at all times.

50. The method according to claim 26 further comprising:

requesting a data manipulation using a searchable attribute;

searching for matches to the searchable attribute;

decrypting the system key common name using the master key;

searching for the system key using the system key common name;

decrypting the encryption key identification with the system key;

searching for the encryption key using the encryption key identification;

performing an integrity check on the encryption key; and

decrypting the data entity with the encryption key.

51. A method for storage and retrieval of encrypted data, the method comprising:

encrypting a plurality of data entities with a rotating and dynamic encryption key having an encryption key identification;

storing the encrypted data entities;

encrypting the encryption key identification with a system key having a system key identification;

encrypting the system key identification with a master key; and

storing the encrypted encryption key identification and the encrypted system key identification with the encrypted data entity; and

creating and rotating to a new encryption key upon occurrence of a desired rotation event.

52. A method of providing a secure environment for the storage of information, the method comprising:

encrypting a data entity with an encryption key having a randomly generated encryption key identification;

storing the encrypted data entity;

encrypting the encryption key identification with a system key having a system key identification;

encrypting the system key identification with a master key; and

storing the encrypted encryption key identification and the encrypted system key identification in association with the encrypted data entity.

53. A method of encrypting and storing a data entity, the method comprising the steps of:

encrypting a data entity using a first encryption key having a first encryption key identification;

encrypting the first encryption key identification using a second encryption key having a second encryption key identification;

encrypting the second encryption key identification using a third encryption key;

storing the encrypted data entity, the encrypted first encryption key identification, and the encrypted second encryption key identification together;

encrypting the first encryption key using a fourth encryption key having a fourth encryption key identification;

encrypting the fourth encryption key identification using the third encryption key;

encrypting the second and fourth encryption keys using the third encryption key;

storing the unencrypted first encryption key identification, the encrypted fourth encryption key identification, and the encrypted first encryption key together;

storing the unencrypted second encryption key identification and the encrypted second encryption key together;

storing the unencrypted fourth encryption key identification and the encrypted fourth encryption key together; and

securing the third encryption key.

54. The method as set forth in claim 53, wherein the second encryption key identification is a system key common name.

55. The method as set forth in claim 53, wherein the second encryption key identification is a system key common name hash value.

56. A method of encrypting, storing, and decrypting a data entity, the method comprising the steps of:

encrypting and storing the data entity as follows—

encrypting a data entity using a first encryption key having a first encryption key identification,

encrypting the first encryption key identification using a second encryption key having a second encryption key identification,

encrypting the second encryption key identification using a third encryption key,

storing the encrypted data entity, the encrypted first encryption key identification, and the encrypted second encryption key identification together,

encrypting the first encryption key using a fourth encryption key having a fourth encryption key identification,

encrypting the fourth encryption key identification using the third encryption key,

encrypting the second and fourth encryption keys using the third encryption key,

storing the unencrypted first encryption key identification, the encrypted fourth encryption key identification, and the encrypted first encryption key together,

storing the unencrypted second encryption key identification and the encrypted second encryption key together,

storing the unencrypted fourth encryption key identification and the encrypted fourth encryption key together,

securing the third encryption key; and

decrypting the data entity as follows—

accessing the third encryption key and using the third encryption key to decrypt the second encryption key identification and the fourth encryption key identification,

identifying the second encryption key using the decrypted second encryption key identification,

using the second encryption key to decrypt the first encryption key identification,

identifying the first encryption key using the decrypted first encryption key identification,

identifying the fourth encryption key using the decrypted fourth encryption key identification,

using the fourth key to decrypt the first encryption key, and

using the decrypted first encryption key to decrypt the data entity.

57. The method as set forth in claim 56, wherein the second encryption key identification is a system key common name.

58. The method as set forth in claim 56, wherein the second encryption key identification is a system key common name hash value.