Computational systems and methods for anonymized storage of double-encrypted data

• US 9,195,848 B2
• Filed: 03/14/2013
• Issued: 11/24/2015
• Est. Priority Date: 09/07/2011
• Status: Active Grant

• Current Assignee: Elwha LLC (Intellectual Ventures LLC)
• Original Assignee: Elwha LLC (Intellectual Ventures LLC)
• Inventors: Lord, Richard T., Lord, Robert W., Davis, Marc E., Lu, Qi, Dyor, Matthew G., Malamud, Mark A., Gates, William, Myhrvold, Nathan P., Huang, Xuedong, Nadella, Satya, Hyde, Roderick A., Reed, Danny Allen, Jung, Edward K. Y., Shum, Harry, Kare, Jordin T., Tegreene, Clarence T., Levien, Royce A., Wood, JR., Lowell L.
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): WYSZYNSKI, AUBREY H
• Application Number:
  US13/830,366
• Publication Number:
  US 20130268756A1
• Time in Patent Office: 985 Days
• Field of Search: 713/165, 713/168, 713/150
• US Class Current: 1/1
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/72 in cryptographic circuits
• CPC Class Codes: G06F 21/73 by creating or determining hardware identification, e.g. serial numbers
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06Q 10/06 Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
• CPC Class Codes: G06Q 30/04 Billing or invoicing
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G06Q 50/01 Social networking
• CPC Class Codes: H04L 2209/42 Anonymization, e.g. involving pseudonyms
• CPC Class Codes: H04L 63/0478 applying multiple layers of encryption, e.g. nested tunnels or encrypting the content with a first key and then with at least a second key cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms

Abstract

Methods, apparatuses, computer program products, devices and systems are described that carry out receiving level-two encrypted data and at least one associated hash; storing the level-two encrypted data and at least one associated hash; and transmitting the level-two encrypted data and at least one associated hash in response to a request for at least one of the level-two encrypted data or the at least one associated hash.

Claims

1. A system comprising:

circuitry for receiving level-two encrypted data and at least one associated hash that is associated with at least one of one or more cryptographic keys associated with at least the level-two encrypted data or one or more identifiers associated with the one or more cryptographic keys;

circuitry for storing the level-two encrypted data and at least one associated hash; and

circuitry for transmitting the level-two encrypted data and at least one associated hash in response to a request for at least one of the level-two encrypted data or the at least one associated hash.

2. The system of claim 1 wherein the circuitry for receiving level-two encrypted data and at least one associated hash that is associated with at least one of one or more cryptographic keys associated with at least the level-two encrypted data or one or more identifiers associated with the one or more cryptographic keys comprises:

circuitry for accepting an output of level-two encryption circuitry.

3. The system of claim 1 wherein the circuitry for receiving level-two encrypted data and at least one associated hash that is associated with at least one of one or more cryptographic keys associated with at least the level-two encrypted data or one or more identifiers associated with the one or more cryptographic keys comprises:

circuitry for accepting level-two encrypted data and at least one associated hash, wherein the at least one associated hash is associated as metadata.

4. The system of claim 1 wherein the circuitry for receiving level-two encrypted data and at least one associated hash that is associated with at least one of one or more cryptographic keys associated with at least the level-two encrypted data or one or more identifiers associated with the one or more cryptographic keys comprises:

circuitry for receiving level-two encrypted data and at least one associated one-way hash.

5. The system of claim 1 wherein the circuitry for receiving level-two encrypted data and at least one associated hash that is associated with at least one of one or more cryptographic keys associated with at least the level-two encrypted data or one or more identifiers associated with the one or more cryptographic keys comprises:

circuitry for accepting an output of level-two encryption circuitry and at least one associated hash, wherein a decryption key for the output of level-two encryption circuitry is unavailable to the entity receiving the level-two encrypted data and at least one associated hash.

6. The system of claim 1 wherein the circuitry for receiving level-two encrypted data and at least one associated hash that is associated with at least one of one or more cryptographic keys associated with at least the level-two encrypted data or one or more identifiers associated with the one or more cryptographic keys comprises:

circuitry for accepting level-two encrypted data and at least one associated hash at a data repository.

7. The system of claim 6 wherein the circuitry for accepting level-two encrypted data and at least one associated hash at a data repository comprises:

circuitry for accepting level-two encrypted data and at least one associated hash at one or more of a data services company, a telecommunications company, a financial institution, or a government entity.

8. The system of claim 1 wherein the circuitry for storing the level-two encrypted data and at least one associated hash comprises:

circuitry for storing the level-two encrypted data and at least one associated hash, wherein the level-two encrypted data is indexed for storage by the at least one associated hash.

9. The system of claim 1 wherein the circuitry for storing the level-two encrypted data and at least one associated hash comprises:

circuitry for storing the level-two encrypted data and at least one associated hash together with level-two encrypted data from the same source.

10. The system of claim 1 wherein the circuitry for storing the level-two encrypted data and at least one associated hash comprises:

circuitry for storing copies of the level-two encrypted data and at least one associated hash in at least two physical locations.

11. The system of claim 1 wherein the circuitry for storing the level-two encrypted data and at least one associated hash comprises:

circuitry for indexing the level-two encrypted data and at least one associated hash according to metadata different from the associated hash.

12. The system of claim 11 wherein the circuitry for indexing the level-two encrypted data and at least one associated hash according to metadata different from the associated hash comprises:

circuitry for indexing the level-two encrypted data and at least one associated hash according to metadata different from the associated hash, wherein the metadata relates to at least one of a date received, a time received, a file size, a file type, a source name, or a source code.

13. The system of claim 1 wherein the circuitry for transmitting the level-two encrypted data and at least one associated hash in response to a request for at least one of the level-two encrypted data or the at least one associated hash comprises:

circuitry for sending the level-two encrypted data and at least one associated hash to a level-two encryptor in response to a request from the level-two encryptor, wherein the level-two encryptor was the source of the level-two encrypted data and at least one associated hash.

14. The system of claim 1 wherein the circuitry for receiving level-two encrypted data and at least one associated hash that is associated with at least one of one or more cryptographic keys associated with at least the level-two encrypted data or one or more identifiers associated with the one or more cryptographic keys comprises:

circuitry for receiving level-two encrypted data and at least one associated hash that is a key designator for at least one or more decryption keys associated with the level-two encrypted data.

15. The system of claim 1 wherein the circuitry for receiving level-two encrypted data and at least one associated hash that is associated with at least one of one or more cryptographic keys associated with at least the level-two encrypted data or one or more identifiers associated with the one or more cryptographic keys comprises:

circuitry for receiving level-two encrypted data and at least one associated hash that is associated with one or more identifiers that are key designators for at least one or more decryption keys associated with the level-two encrypted data.

16. A computer-implemented method comprising:

receiving level-two encrypted data and at least one associated hash that is associated with at least one of one or more cryptographic keys associated with at least the level-two encrypted data or one or more identifiers associated with the one or more cryptographic keys;

storing the level-two encrypted data and at least one associated hash; and

transmitting the level-two encrypted data and at least one associated hash in response to a request for at least one of the level-two encrypted data or the at least one associated hash; and

wherein at least one of the receiving, the storing, or the transmitting is performed at least in part with one or more processing devices.

17. The computer-implemented method of claim 16 wherein receiving level-two encrypted data and at least one associated hash that is associated with at least one of one or more cryptographic keys associated with at least the level-two encrypted data or one or more identifiers associated with the one or more cryptographic keys comprises at least one of:

accepting an output of level-two encryption circuitry;

accepting level-two encrypted data and at least one associated hash, wherein the at least one associated hash is associated as metadata;

or

receiving level-two encrypted data and at least one associated one-way hash.

18. The computer-implemented method of claim 16 wherein receiving level-two encrypted data and at least one associated hash that is associated with at least one of one or more cryptographic keys associated with at least the level-two encrypted data or one or more identifiers associated with the one or more cryptographic keys comprises:

accepting an output of level-two encryption circuitry and at least one associated hash, wherein a decryption key for the output of level-two encryption circuitry is unavailable to the entity receiving the level-two encrypted data and at least one associated hash.

19. The computer-implemented method of claim 16 wherein transmitting the level-two encrypted data and at least one associated hash in response to a request for at least one of the level-two encrypted data or the at least one associated hash comprises:

sending the level-two encrypted data and at least one associated hash to a level-two encryptor in response to a request from the level-two encryptor, wherein the level-two encryptor was the source of the level-two encrypted data and at least one associated hash.

20. A computer program product comprising:

an article of manufacture including a non-transitory signal-bearing medium bearing;

(1) one or more instructions for receiving level-two encrypted data and at least one associated hash that is associated with at least one of one or more cryptographic keys associated with at least the level-two encrypted data or one or more identifiers associated with the one or more cryptographic keys;

(2) one or more instructions for storing the level-two encrypted data and at least one associated hash; and

(3) one or more instructions for transmitting the level-two encrypted data and at least one associated hash in response to a request for at least one of the level-two encrypted data or the at least one associated hash.

21. The computer program product of claim 20, wherein the non-transitory signal-bearing medium includes a computer-readable medium.

22. The computer program product of claim 20, wherein the non-transitory signal-bearing medium includes a recordable medium.

23. The computer program product of claim 20, wherein the non-transitory signal-bearing medium includes a communications medium.

24. A system comprising:

a computing device; and

instructions that when executed on the computing device cause the computing device to;

(1) receive level-two encrypted data and at least one associated hash that is associated with at least one of one or more cryptographic keys associated with at least the level-two encrypted data or one or more identifiers associated with the one or more cryptographic keys;

(2) store the level-two encrypted data and at least one associated hash; and

(3) transmit the level-two encrypted data and at least one associated hash in response to a request for at least one of the level-two encrypted data or the at least one associated hash.

25. The system of claim 24 wherein the computing device comprises:

one or more of a personal digital assistant (PDA), a personal entertainment device, a mobile phone, a laptop computer, a tablet personal computer, a networked computer, a computing system comprised of a cluster of processors, a computing system comprised of a cluster of servers, a workstation computer, and/or a desktop computer.

26. A system comprising:

means for receiving level-two encrypted data and at least one associated hash that is associated with at least one of one or more cryptographic keys associated with at least the level-two encrypted data or one or more identifiers associated with the one or more cryptographic keys;

means for storing the level-two encrypted data and at least one associated hash;

means for transmitting the level-two encrypted data and at least one associated hash in response to a request for at least one of the level-two encrypted data or the at least one associated hash.