US 12,192,334 B2 · Database exclusion (DBX) for multi-party access (MPA) to sensitive personal information (SPI)

Abstract

A system and method for protecting Sensitive Personal Information (SPI) from Multi-Party Access (MPA), including receiving a request for access to a data record, the request comprising an encrypted device identifier identifying the client device, encrypting the data record using a random symmetric key to generate an encrypted data record, encrypting the data record using a second symmetric key to generate a second encrypted data record, the second symmetric key being different from the random symmetric key, encrypting the random symmetric key to generate an encrypted symmetric key by using a public key associated with the client device or a key encryption key associated with the one or more processors, and transmitting a message comprising the encrypted symmetric key and the encrypted device identifier. The message causing the client device to access the data record using a database, the encrypted device identifier, and the encrypted symmetric key.

Claims20

Dependent claims

A method, comprising:

transmitting, by a client device and to a system, a request for access to a data record, the request comprising an encrypted device identifier identifying the client device;
receiving, by the client device from the system, a message comprising an encrypted symmetric key and the encrypted device identifier;
and
in response to receiving the message, accessing, by the client device, the data record using a database, the encrypted device identifier, and the encrypted symmetric key.

1 more element

Dependencies are inferred from the claim text.

Facts

Application

18/244,650Filed 11 Sep 2023 · continuation

Priority

29 Apr 2020

Published

US 2023/0421364 A128 Dec 2023

Granted

7 Jan 2025

Term ends

Not estimatedThe source records don’t support an estimate.

Classification8 codes

H04L 9/0825
Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely…: using…
G06F 21/6218
Protecting access to data via a platform, e.g. using keys or access control rules: to a system of files or objects, e.g. local or distributed file…
G06F 21/6245
To a system of files or objects, e.g. local or distributed file system or database: protecting personal data, e.g. for financial or medical purposes
H04L 9/0822
Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely…: using…

Family

Application16/862,281Parent of this continuation · filed 29 Apr 2020

Application17/827,200Parent of this continuation · filed 27 May 2022

US 2023/0421364 A1Pre-grant publication · published 28 Dec 2023

US 11,757,628 B1Parent of this continuation

US 11,349,644 B1Parent of this continuation

US 12,192,334 B2This patent

From the US filing history. Foreign family members aren’t listed.

Database exclusion (DBX) for multi-party access (MPA) to sensitive personal information (SPI)

Life of this patent

Database exclusion (DBX) for multi-party access (MPA) to sensitive personal information (SPI)

Life of this patent

Abstract

Claims20