Methods and systems for secure data transmission

A system for secure data transmission, the system comprising:

• a database having stored thereon double-encrypted data;
• a server device in communication with the database;
• and
• a client device in communication with the server device;
• the client device being operable to send a data request to the server device, the data request comprising a first share of a first encryption key, and a first location in the database at which is located desired double-encrypted data;
• the server device being operable to receive the sent data request, extract the first share and the first location therefrom, and then obtain the desired double-encrypted data from the database using the extracted first location, the server device being further operable to generate the first encryption key using the extracted first share and one or more additional shares held by the server device, and then decrypt the obtained desired double-encrypted data using the generated first encryption key to form single-encrypted data;
• and
• wherein the server device is operable to send the single-encrypted data to the client device, and the client device is operable to receive the sent single-encrypted data and to decrypt the single-encrypted data using a second encryption key held by the client device to form unencrypted data;
• wherein the client device is further operable to obtain a first code corresponding to the desired double-encrypted data and generate the second encryption key and the first location from the obtained first code, and obtain a second code corresponding to the desired double-encrypted data and generate a third encryption key and a second location from the obtained second code, the second location being a location in the database at which is located an encrypted first share of the first code;
• the server device being further operable to receive the second location, obtain the encrypted first share of the first code from the database using the second location and send the encrypted first share of the first code to the client device;
• the client device being subsequently operable to receive the encrypted first share of the first code and decrypt the encrypted first share of the first code using the third encryption key to obtain an unencrypted first share of the first code, and generate the first code from the unencrypted first share of the first code and one or more additional shares of the first code held by the client device.

A client device for use in a system for secure data transmission, the system comprising a database having stored thereon double-encrypted data, a server device in communication with the database, and the client device in communication with the server device,

• the client device comprising at least one processor and at least one memory including computer program code, wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the device to perform at least the following:
• send a data request to the server device, the data request comprising a first share of a first encryption key, and a first location in the database at which is located desired double-encrypted data;
• receive single-encrypted data from the server device in response to the sent data request;
• decrypt the received single-encrypted data using a second encryption key held by the client device to form unencrypted data;
• obtain a first code corresponding to the desired double-encrypted data and generate the second encryption key and the first location from the obtained first code;
• obtain a second code corresponding to the desired double-encrypted data and generate a third encryption key and a second location from the obtained second code, the second location being a location in the database at which is located an encrypted first share of the first code;
• receive the encrypted first share of the first code and decrypt the encrypted first share of the first code using the third encryption key to obtain an unencrypted first share of the first code;
• and
• generate the first code from the unencrypted first share of the first code and one or more additional shares of the first code held by the client device.

A server device for use in a system for secure data transmission, the system comprising a database having stored thereon double-encrypted data and being in communication with the server device, a client device in communication with the server device, and the server device, the server device comprising at least one processor and at least one memory including computer program code, wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the device to perform at least the following:

• receive a data request from the client device, the data request comprising a first share of a first encryption key, and a first location in the database at which is located desired double-encrypted data, extract the first share and the first location from the received data request;
• obtain the desired double-encrypted data from the database using the extracted first location;
• generate the first encryption key using the extracted first share and one or more additional shares held by the server device;
• decrypt the obtained desired double-encrypted data using the generated first encryption key to form single-encrypted data;
• send the single-encrypted data to the client device;
• receive a second location from the client device;
• and
• obtain an encrypted first share of a first code from the database using the second location and send the encrypted first share of the first code to the client device.

A non-transitory computer-readable storage medium having stored thereon computer program code which when executed by a computer causes the computer to execute to following method:

• sending a data request to a server device, the data request comprising a first share of a first encryption key, and a first location in the database at which is located desired double-encrypted data;
• receiving single-encrypted data from the server device in response to the sent data request;
• and
• decrypting the received single-encrypted data using a held second encryption key to form unencrypted data;
• obtaining a second code corresponding to the desired double-encrypted data and generate a third encryption key and a second location from the obtained second code, the second location being a location in the database at which is located an encrypted first share of a first code;
• receiving the encrypted first share of the first code and decrypt the encrypted first share of the first code using the third encryption key to obtain an unencrypted first share of the first code;
• and
• generating the first code from the unencrypted first share of the first code and one or more additional shares of the first code held by the client device.

A non-transitory computer-readable storage medium having stored thereon computer program code which when executed by a computer causes the computer to execute to following method:

• receiving a data request from a client device, the data request comprising a first share of a first encryption key, and a first location in a database at which is located desired double-encrypted data,
• extracting the first share and the first location from the received data request;
• obtaining the desired double-encrypted data from the database using the extracted first location;
• generating the first encryption key using the extracted first share and one or more stored additional shares;
• decrypting the obtained desired double-encrypted data using the generated first encryption key to form single-encrypted data;
• sending the single-encrypted data to the client device;
• receive a second location from the client device;
• obtaining an encrypted first share of a first code from the database using the second location;
• and
• sending the encrypted first share of the first code to the client device.