Information storage system

• US 7,698,560 B2
• Filed: 04/11/2003
• Issued: 04/13/2010
• Est. Priority Date: 04/11/2002
• Status: Active Grant

• Current Assignee: Allan Endresz
• Original Assignee: Spitlock Holdings Pty Limited
• Inventors: Tune, Andrew Dominic
• Primary Examiner(s): Revak; Christopher A
• Application Number:
  US10/511,254
• Publication Number:
  US 20050188005A1
• Time in Patent Office: 2,559 Days
• Field of Search: None
• US Class Current: 713/179
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/24 Credit schemes, i.e. "pay after"
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes

Abstract

A system for storing information having a predetermined use which requires the information to be secured. The information may comprise credit card details used to complete a transaction. The system includes: (a) A client system for storing an encoded version of the information and an identifier. The encoded version is generated from first data of the information and an encoded version of the second data of the information. The information can be generated from the first data and the second data, and the predetermined use is infeasible with only one of the first data and the second data, (b) A remote server for storing the second data and an encoded identifier generated from the identifier. The client system sends at least the encoded version of the second data to the remote server. The client system or the remote server is able to generate the information from the first data and the second data. Accordingly, only part of the information to be secured is stored locally on the client system, whilst the other part is stored on the remote server, and neither the client system nor the remote server have a record of the entire information.

Claims

1. A system for storing information having a predetermined use which requires said information to be secured, including:

a client system for generating first data and second data from said information, such that said information can be generated from said first data and said second data, and said predetermined use is infeasible with only one of said first data and said second data, and for storing an identifier with said first data; and

a remote server for storing said second data with an encoded identifier generated from said identifier.

2. A system as claimed in claim 1, wherein said remote server is adapted to send an encoded version of said second data to said client system, and said client system is adapted to generate an encoded version of said information from said first data and said encoded second data, and to store the encoded information with said identifier.

3. A system as claimed in claim 2, including a remote hash server for generating the encoded second data.

4. A system for storing information having a predetermined use which requires said information to be secured, including:

a client system for storing an encoded version of said information and an identifier, the encoded information having been generated from first data of said information and an encoded version of second data of said information, wherein said information can be generated from said first data and said second data, and said predetermined use is infeasible with only one of said first data and said second data; and

a remote server for storing said second data and an encoded identifier generated from said identifier;

wherein said client system is adapted to send at least the encoded version of the second data to said remote server.

5. A system as claimed in claim 4, including a plurality of said remote server, and a gateway for selecting at least one of the remote servers, and for forwarding data received from said client system to the selected at least one remote server.

6. A process, executed by a client system, for storing information having a predetermined use which requires said information to be secured, including:

generating first data and second data from said information, such that said information can be generated from said first data and said second data, and said predetermined use cannot be performed using only one of said first data and said second data;

sending said first data to a remote server for storage with an encoded identifier generated from an identifier; and

storing said second data with said identifier.

7. A process as claimed in claim 6, including generating encoded data from said information, wherein said first data and second data are generated from said encoded data.

8. A process as claimed in claim 7, wherein the quantity of said encoded data is substantially larger than quantity of said information.

9. A process as claimed in claim 7, wherein said step of generating includes encrypting said information.

10. A process as claimed in claim 6, wherein said first data and said second data are stored at respective locations physically remote from one another.

11. A process as claimed in claim 6, wherein said encoded identifier includes a cryptographic hash of said identifier.

12. A process as claimed in claim 11, wherein said hash is remotely generated using a hash function unknown to said client system and unknown to said remote server.

13. A process as claimed in claim 6, including:

receiving an encoded version of said first data from said remote server; and

generating an encoded version of said information from the encoded first data and said second data; and

wherein said step of storing includes storing the encoded information and said identifier.

14. An information storage system having components for executing the steps of any one of 6-10, 11-16, 17, 18-22.

15. A computer-readable storage medium having stored thereon program code for executing the steps of any one of 6-10, 11-16, 17, 18-22.

16. A process for storing information having a predetermined use which requires said information to be secured, including:

receiving an identifier and first data from a client system having second data, said first data and said second data being such that said information can be generated from said first data and said second data, and said predetermined use cannot be performed using only one of said first data and said second data;

storing said first data with an encoded identifier generated from said identifier, without storing said identifier;

generating encoded first data from said first data; and

sending said encoded first data to said client system for storage with said second data and said identifier.

17. A process for generating information having a predetermined use which requires said information to be secured, including:

determining, on the basis of an identifier, first data of said information;

sending said identifier to said remote server;

receiving second data of said information from a remote server, said second data determined on the basis of an encoded identifier generated from said identifier; and

generating said information from said first data and said second data, wherein said predetermined use is infeasible with only one of said first data and said second data.

18. A process as claimed in claim 17, including using said information for said predetermined use and then destroying said information.

19. A process for generating information according to claim 18, wherein said information includes a credit card number and said predetermined use includes processing a financial transaction on the basis of said credit card number.

20. A process for generating information having a predetermined use which requires said information to be secured, including:

receiving an identifier;

determining first data of said information on the basis of an encoded identifier generated from said identifier; and

sending said first data to a client system to enable said information to be generated from said first data and second data of said information, wherein said predetermined use is infeasible with only one of said first data and said second data.

21. A process for generating information having a predetermined use which requires said information to be secured, including:

determining, on the basis of an identifier, an encoded version of said information, the encoded information having been generated from first data of said information and an encoded version of second data of said information; and

sending said identifier and said encoded information to a remote server for generation of said information from said first data and said second data, wherein said predetermined use is infeasible with only one of said first data and said second data.

22. A process, executed by a computer system, for generating information having a predetermined use which requires said information to be secured, including:

receiving an identifier and an encoded version of said information;

determining first data of said information on the basis of an encoded identifier generated from said identifier;

determining second data from an encoded version of said second data;

generating said information from said first data and second data of the encoded information, wherein said predetermined use is infeasible with only one of said first data and said second data;

using said information for said predetermined use; and

destroying said information.