Systems and methods for secure storage of user information in a user profile

• US 9,665,638 B2
• Filed: 10/23/2013
• Issued: 05/30/2017
• Est. Priority Date: 10/30/2012
• Status: Active Grant

• Current Assignee: UBIQ Security Incorporated
• Original Assignee: FHOOSH, Inc.
• Inventors: Kahle, Charles, Iasi, Anthony F., Eigner, Linda, Eigner, William, Tobias, Eric
• Primary Examiner(s): Robinson, Greta
• Application Number:
  US14/061,736
• Publication Number:
  US 20140122508A1
• Time in Patent Office: 1,315 Days
• Field of Search: 707640, 707661, 707704, 707770, 707781, 707783, 707784, 707786, 707787, 707788, 707803, 707812, 707752, 705 18, 705 50, 705 51, 705 71, 705 72, 705904, 715212, 715216, 715221, 715222, 715224, 715225, 715226, 715231, 715234, 715235, 713156, 713165, 713166, 713167, 713171, 713183, 713184, 711100, 711129, 711130, 711162, 711173
• CPC Class Codes: G06F 16/00 Information retrieval; Database structures therefor; File system structures therefor
• CPC Class Codes: G06F 16/285 Clustering or classification
• CPC Class Codes: G06F 16/337 Profile generation, learning or modification
• CPC Class Codes: G06F 16/355 Class or cluster creation or modification
• CPC Class Codes: G06F 16/9535 Search customisation based on user profiles and personalisation
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06F 3/0487 using specific features provided by the input device, e.g. functions controlled by the rotation of a mouse with dual sensing arrangements, or of the nature of the input device, e.g. tap gestures based on pressure sensed by a digitiser
• CPC Class Codes: G06F 40/174 Form filling; Merging
• CPC Class Codes: G06Q 30/0204 Market segmentation
• CPC Class Codes: G06Q 30/0269 based on user profile or attribute
• CPC Class Codes: H04L 67/30 Profiles
• CPC Class Codes: H04W 4/08 User group management

Abstract

Systems and methods are provided for securely storing information of a user in a user profile to prevent access to the information and minimize the amount of information disclosed during a security breach. Information pertaining to a user is obtained from one or more sources and organized into a user profile and securely stored in a database. The user profile can be stored remotely in a cloud-based system at a remote encrypted server, with portions of the profile stored in separate locations with separate encryption to minimize the risk of unauthorized access to one portion of the information. The fields of data in the user profile can also be separately encrypted with separate encryption keys and separately stored in separate databases to minimize the amount of information which could be disclosed by the unauthorized access to a single encryption key or a single database.

Claims

1. A system for securely storing user information from a user profile, comprising:

data storage comprising a plurality of storage locations;

a profile creation unit configured to create the user profile comprising user information, the user information including user identifiable information and other information, to be stored in the data storage, wherein the user information includes a plurality of fields and a plurality of values corresponding to the plurality of fields;

a logic application server configure to;

dissociate the user profile from sections of a file that include other information,

disassemble the user profile into a plurality of separate pieces of identity information; and

individually encrypt each of the plurality of separate pieces of identity information comprising the user profile using a separate encryption key for each of the separate pieces of identity information; and

a data storage server configured to distribute each of the plurality of individually encrypted pieces of identity information for separate storage among the plurality of storage locations.

2. The system of claim 1, wherein each of at least some of the plurality of fields comprises a user identity, a user financial information, a user password, a user address, and a user identification number.

3. The system of claim 1, wherein:

at least some of the plurality of sections comprising the user information include the plurality of values comprising the user information; and

at least some of the plurality of sections comprise the corresponding fields comprising the user information.

4. The system of claim 1, wherein:

at least some of the plurality of sections comprising the user information include at least some of the plurality of values and at least some of the plurality of fields corresponding to the plurality of values.

5. The system of claim 1, wherein at least some of the plurality of fields comprising the user information are identified based on information obtained from one or more of an existing electronic form, manual entry by a user, and a third party application interface.

6. The system of claim 1, wherein the data storage server is configured to store each of the plurality of sections in a separate storage location.

7. The system of claim 1, wherein the data storage server is further configured to store each encryption key used to encrypt each of the plurality of sections.

8. A method of securely storing user information from a user profile, comprising:

creating, with a profile creation unit, the user profile comprising user information, the user information including user identifiable information and other information, to be stored in data storage comprising a plurality of storage locations, wherein the user information includes a plurality of fields and a plurality of values corresponding to the plurality of fields;

dissociating, with a logic application server, the user profile from sections of a file that include other information,

disassembling, with a logic application server, the user profile into a plurality of separate pieces of identity information;

individually encrypting, with the logic application server, each of the plurality of separate pieces of identity information comprising the user profile using a separate encryption key for each of the separate pieces of identity information; and

distributing, with a data storage server, each of the plurality of individually encrypted pieces of identity information for separate storage among the plurality of storage locations.

9. The method of claim 8, wherein each of at least some of the plurality of fields comprises one of a user identity, a user financial information, a user password, a user address, and a user identification number.

10. The method of claim 8, wherein:

at least some of the plurality of sections comprising the user information include the plurality of values comprising the user information; and

at least some of the plurality of sections comprise the corresponding fields comprising the user information.

11. The method of claim 8, wherein:

at least some of the plurality of sections comprising the user information include at least some of the plurality of values and at least some of the plurality of fields corresponding to the plurality of values.

12. The method of claim 8, wherein each of the plurality of sections is stored in a separate storage location.

13. The method of claim 8, further comprising storing each encryption key used to encrypt each of the plurality of sections.