SECURE DATABASE SYSTEM

• US 20010054142A1
• Filed: 05/14/1998
• Published: 12/20/2001
• Est. Priority Date: 06/14/1997
• Status: Active Grant

• Current Assignee: International Computers Limited (Fujitsu Limited)
• Original Assignee: International Computers Limited (Fujitsu Limited)
• Inventors: VAN BLARKOM, GILLES WILLEM
• Granted Patent: US 6,360,324 B2
• Time in Patent Office: Days
• US Class Current: 713/151
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress

Abstract

A secure database system comprises a server having a database including at least one personal information table and at least one further table containing information relating to the persons whose details are stored in the personal information table. The keys of the tables in the database are unrelated, so that it is impossible to determine solely from information in the server which record in the further table corresponds to which record in the personal information table. Thus, even if a hacker obtains access to the database, the hacker will not be able to relate information in the different tables. Each legitimate client uses an encryption process to convert a personal identifier value, which identifies the record relating to a particular person in the personal information table, into a pseudo-identifier value, which identifies a record relating to the same person in the further table.

Claims

1. A computer system comprising:

(a) a server having a database including at least one personal information table and at least one further table containing information relating to persons whose details are stored in the personal information table; and

(b) a plurality of clients, for accessing said database;

(c) said tables in said database having keys that are unrelated to each other, whereby it is impossible to determine solely from information in the server which record in said further table corresponds to which record in said personal information table; and

(d) each client including an encryption process for converting a personal identifier value, which identifies a record relating to a particular person in said personal information table, into a pseudo-identifier value, which identifies a record relating to the same person in said further table.

2. A computer system according to

claim 1

wherein said encryption process uses a different encryption protocol for each said pseudo-identifier value.

3. A computer system according to

claim 2

wherein the encryption process uses the following parameters:

the personal identifier value being encrypted,

an encryption key, and

a unique identifier number for the pseudo-identifier.

4. A computer system according to

claim 1

wherein the database includes at least one free text table containing free text information, and wherein said client includes means for encrypting text before writing it into said free text table and for decrypting text when read from said free text table.

5. A computer system according to

claim 1

including means for encrypting information while in transit between said client and said server.

6. A method of securely storing data in a database, comprising:

(a) storing in a server a database including at least one personal information table and at least one further table containing information relating to persons whose details are stored in the personal information table;

(b) providing said tables with keys that are unrelated to each other, whereby it is impossible to determine solely from information in the server which record in said further table corresponds to which record in said personal information table;

(c) operating a plurality of clients to access said database; and

(d) performing, in each said client, an encryption process which converts a personal identifier value, identifying a record relating to a particular person in said personal information table, into a pseudo-identifier value, which identifies a record relating to the same person in said further table.

7. A method according to

claim 6

wherein a different encryption protocol is used for each said pseudo-identifier value.

8. A method according to

claim 7

wherein said encryption process uses the following parameters:

the personal identifier value being encrypted,

an encryption key, and

a unique identifier number for the pseudo-identifier.

9. A method according to

claim 6

wherein said database includes at least one free text table containing free text information, and wherein each said client encrypts text before writing it into said free text table and decrypts text when read from said free text table.

10. A method according to

claim 6

wherein information is encrypted while in transit between said client and said server.