Method and system for associating database content for security enhancement

• US 20090150683A1
• Filed: 12/07/2007
• Published: 06/11/2009
• Est. Priority Date: 12/07/2007
• Status: Active Grant

• Current Assignee: Roche Diabetes Care Inc. (Roche Holding AG)
• Original Assignee: Logikos, Inc., Roche Diagnostics Operations Incorporated (Roche Holding AG)
• Inventors: Bernard, Keith E., Gejdos, Igor, Markisohn, David Bradley, Young, Morris J.
• Granted Patent: US 9,003,538 B2
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16H 40/67 for remote operation

Abstract

A system and method for associating database content for security enhancement is provided, the method being applicable to a system comprising a computer configured to process a data management application and to store data in databases. According to one embodiment of the method according to the invention, the application uses an encryption key to encrypt data. The application stores the encrypted data in two or more databases. The databases may comprise a system database for storing encrypted user access data and one or more results databases for storing patient data. Databases may be stored locally, remotely, or both locally and remotely.

Claims

1. A method for associating database content comprising the steps of:

creating an encryption key;

encrypting data with said encryption key; and

storing the encrypted data in two or more databases.

2. The method of claim 1 wherein the encryption key is stored in a key store.

3. The method of claim 2 wherein the key store is selected from a group consisting of an operating system key store, a key server appliance, removable media, and a file.

4. The method of claim 2 wherein the key store resides in local storage media.

5. The method of claim 1 wherein the databases reside in local storage media.

6. The method of claim 1 wherein the databases reside in remote storage media.

7. The method of claim 1 wherein one or more databases reside in the local storage media and one or more databases resides in the remote storage media.

8. The method of claim 1 wherein the two or more databases comprise a system database and one or more results databases.

9. The method of claim 8 wherein the system database stores user access data and the results databases store patient data.

10. A system for associating database content comprising:

an application for managing data;

a computer configured to process the application;

an encryption key configured to encrypt data; and

two or more databases for storing encrypted data.

11. The system of claim 10 further including a key store for storing the encryption key.

12. The system of claim 11 wherein the key store is selected from a group consisting of an operating system key store, a key server appliance, removable media, and a file.

13. The system of claim 11 wherein the key store resides in local storage media.

14. The system of claim 10 wherein the two or more databases reside in local storage media.

15. The system of claim 10 wherein the two or more databases reside in remote storage media.

16. The system of claim 10 wherein one or more databases reside in the local storage media and one or more databases resides in the remote storage media.

17. The system of claim 10 wherein the two or more databases comprise a system database and one or more results databases.

18. The system of claim 17 wherein the system database stores user access data and the results databases store patient data.