# US 10,372,733 B2 · Systems and methods for secure storage of user information in a user profile > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,372,733 B2 - Document ID: US10372733B2 - Status: Granted - Kind: B2 - Application number: 15/605,860 - Filed: 2017-05-25 - Published: 2017-09-14 - Granted: 2019-08-06 - Earliest claimed: 2012-10-30 - Assignees: Ubiq Security, Inc. - Applicants: Fhoosh, Inc. - Inventors: Linda Eigner; William Eigner; Eric Tobias; Charles Kahle; Anthony F. Iasi - Web page: https://patentgrep.com/patent/US10372733B2 ## CPC - G06F 16/285: {Clustering or classification} - G06F 3/0487: using specific features provided by the input device, e.g. functions controlled by the rotation of a mouse with dual sensing arrangements, or of the nature of the input device, e.g. tap gestures based on pressure sensed by a digitiser - G06F 16/00: Information retrieval; Database structures therefor; File system structures therefor - G06F 16/337: {Profile generation, learning or modification} - G06F 16/355: Creation or modification of classes or clusters - G06F 16/9535: Search customisation based on user profiles and personalisation - G06F 21/60: Protecting data - G06F 40/174: Form filling; Merging - G06Q 30/0204: Market segmentation - G06Q 30/0269: {based on user profile or attribute} - H04L 67/30: Profiles - H04W 4/08: User group management - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract Systems and methods are provided for securely storing information of a user in a user profile to prevent access to the information and minimize the amount of information disclosed during a security breach. Information pertaining to a user is obtained from one or more sources and organized into a user profile and securely stored in a database. The user profile may be stored remotely in a cloud-based system at a remote encrypted server, with portions of the profile stored in separate locations with separate encryption to minimize the risk of unauthorized access to one portion of the information. The fields of data in the user profile may also be separately encrypted with separate encryption keys and separately stored in separate databases to minimize the amount of information which could be disclosed by the unauthorized access to a single encryption key or a single database. ## Claims ### Claim 1 A system for securely storing information, comprising: data storage comprising a plurality of storage locations; a profile creation unit configured to create a user profile comprising user information, the user information including user identifiable information and other information, to be stored in the data storage, wherein the user information includes a plurality of fields and a plurality of values corresponding to the plurality of fields; a logic application server configured to: dissociate the user profile from sections of a file that include other information, disassemble the user profile into a plurality of separate pieces of identity information; and individually encrypt each of the plurality of separate pieces of identity information comprising the user profile using a separate encryption key for each of the separate pieces of identity information, wherein the plurality of individually encrypted pieces of identity information is distributed for separate storage among the plurality of storage locations. ### Claim 2 (depends on 1) The system of claim 1, wherein the data storage is a single data store and the plurality of storage locations are located on the single data store. ### Claim 3 (depends on 2) The system of claim 2, wherein the single data store is located with the logic application server. ### Claim 4 (depends on 1) The system of claim 1, further comprising a data storage server configured to distribute each of the plurality of individually encrypted pieces of identity information for separate storage among the plurality of storage locations on physically separate storage devices. ### Claim 5 (depends on 1) The system of claim 1, wherein each of at least some of the plurality of fields comprises a user identity, a user financial information, a user password, a user address, and a user identification number. ### Claim 6 (depends on 1) The system of claim 1, wherein: at least some of the plurality of sections comprising the user information include the plurality of values comprising the user information; and at least some of the plurality of sections comprise the corresponding fields comprising the user information. ### Claim 7 (depends on 1) The system of claim 1, wherein: at least some of the plurality of sections comprising the user information include at least some of the plurality of values and at least some of the plurality of fields corresponding to the plurality of values. ### Claim 8 (depends on 1) The system of claim 1, wherein at least some of the plurality of fields comprising the user information are identified based on information obtained from one or more of an existing electronic form, manual entry by a user, and a third party application interface. ### Claim 9 (depends on 1) The system of claim 1, a data storage server configured to store each of the plurality of sections in a separate storage location. ### Claim 10 (depends on 1) The system of claim 1, further comprising a data storage server configured to store each encryption key used to encrypt each of the plurality of sections. ### Claim 11 (depends on 1) The system of claim 1, wherein the logic application server is further configured to: disassemble the sections of the file that include other information into a plurality of separate pieces of other information; and individually encrypt each of the plurality of separate pieces of other information using a separate encryption key for each of the separate pieces of other information, wherein the plurality of individually encrypted pieces of other information is distributed for separate storage among the plurality of storage locations. ### Claim 12 A method of securely storing information, comprising: creating, with a profile creation unit, a user profile comprising user information, the user information including user identifiable information and other information, to be stored in data storage comprising a plurality of storage locations, wherein the user information includes a plurality of fields and a plurality of values corresponding to the plurality of fields; dissociating, with a logic application server, the user profile from sections of a file that include other information, disassembling, with a logic application server, the user profile into a plurality of separate pieces of identity information; individually encrypting, with the logic application server, each of the plurality of separate pieces of identity information comprising the user profile using a separate encryption key for each of the separate pieces of identity information; and separately storing each of the plurality of individually encrypted pieces of identity information for separate storage among the plurality of storage locations. ### Claim 13 (depends on 12) The method of claim 12, wherein the plurality of individually encrypted pieces of identity information are stored in separate storage locations in a single data store. ### Claim 14 (depends on 13) The method of claim 13, wherein the single data store is located with the logic application server. ### Claim 15 (depends on 12) The method of claim 12, further comprising distributing, with a data storage server, each of the plurality of individually encrypted pieces of identity information for separate storage among the plurality of storage locations on physically separate storage devices. ### Claim 16 (depends on 12) The method of claim 12, wherein each of at least some of the plurality of fields comprises one of a user identity, a user financial information, a user password, a user address, and a user identification number. ### Claim 17 (depends on 12) The method of claim 12, wherein: at least some of the plurality of sections comprising the user information include the plurality of values comprising the user information; and at least some of the plurality of sections comprise the corresponding fields comprising the user information. ### Claim 18 (depends on 12) The method of claim 12, wherein: at least some of the plurality of sections comprising the user information include at least some of the plurality of values and at least some of the plurality of fields corresponding to the plurality of values. ### Claim 19 (depends on 12) The method of claim 12, wherein each of the plurality of sections is stored in a separate storage location. ### Claim 20 (depends on 12) The method of claim 12, further comprising storing each encryption key used to encrypt each of the plurality of sections. ### Claim 21 (depends on 12) The method of claim 12, further comprising: disassembling the sections of the file that include other information into a plurality of separate pieces of other information; and individually encrypting each of the plurality of separate pieces of other information using a separate encryption key for each of the separate pieces of other information, wherein the plurality of individually encrypted pieces of other information is distributed for separate storage among the plurality of storage locations.