Back to results
US 12,750,235 B2Granted
Electronic deposit box for data protection and storage
OwnerJan Michael Carsoninventor
Life of this patent
Estimating the term…
Abstract
An information handling system (IHS), method and computer program product secure data such as personally identifiable information (PII) with separated dual encryption of each data payload and obscured labeling, providing an electronic deposit box (EpositBox) to thwart a data breach, which are then stored in a blockchain with retrieval facilitated by a sidecar indexing database. The IHS receives a tenant data structure tenant record(s) having tabular label(s) associated with a data payload. The IHS assigns a block ID, appends a signature, and a tenant identifier to the tenant record. The IHS stores the tenant record in the blockchain, and the block ID and signature are stored in the sidecar.
Claims15
An information deposit environment comprising:
- a blockchain system;
- a sidecar database configured as an indexing database;
- one or more tenant information handling systems (IHS);
- and
- a depositary IHS comprising:
- a network interface communicatively connectable, via a network, to one or more tenant IHS, the blockchain system, and the sidecar database;
- a secure memory that stores an electronic deposit box application;
- and
- a controller communicatively coupled to the network interface and the secure memory and comprising at least one hardware processor that executes the electronic deposit box application to configure the depositary IHS, and which:
- connects, via the network interface, with the tenant IHS;
- receives, from the tenant IHS, a tenant data structure comprising at least one tenant record, each tenant record including a data payload and one or more tenant-hashed tabular labels associated with the data payload, wherein the data payload has been encrypted by the tenant IHS using a first encryption algorithm and a first encryption key;
- further encrypts the payload using a second encryption algorithm and a second encryption key;
- assigns a block ID to the tenant record;
- creates a signature comprising a hash of the block ID and the one or more tabular labels;
- appends a tenant identifier associated with the tenant, and the signature, to the at least one tenant record of the tenant data structure;
- stores the at least one tenant record in a blockchain system;
- and
- stores the block ID and the signature to the sidecar database, and wherein the data payload is not stored to the sidecar database.
15 more elements
A method comprising:
- securely connecting, via a network interface of a depositary information handling system (IHS), with a tenant IHS, the depositary IHS comprising the network interface communicatively connectable, via a network, to one or more tenant IHS, a blockchain system, and a sidecar indexing database;
- a secure memory;
- and a controller communicatively coupled to the network interface and the secure memory and comprising at least one hardware processor, and;
- receiving, from the tenant IHS, a tenant data structure comprising at least one tenant record, each tenant record including a data payload one or more tenant-hashed tabular labels associated with the data payload, wherein the payload has been encrypted by the tenant IHS using a first encryption algorithm and a first encryption key;
- further encrypting the data payload using a second encryption algorithm and a second encryption key;
- assigning a block ID to the tenant record;
- creating a signature comprising a hash of the block ID and the one or more tabular labels;
- appending a tenant identifier associated with the tenant, and the signature, to the at least one tenant record of the tenant data structure;
- storing the at least one tenant record in the blockchain system;
- and
- storing the block ID and the signature to the sidecar indexing database, and
- wherein the data payload is not stored to the sidecar indexing database.
9 more elements
A computer program product comprising:
- a computer readable storage device;
- and
- program code on the computer readable storage device that when executed by a processor associated with a depositary information handling system (IHS), the depositary IHS comprising a network interface communicatively connectable, via a network, to one or more tenant IHS, a blockchain system, and a sidecar indexing database;
- a secure memory;
- and a controller communicatively coupled to the network interface and the secure memory and comprising at least one processor, and the program code enables the depositary IHS to provide functionality of:
- securely connecting, via the network interface of the depositary IHS, with the tenant IHS;
- receiving, from the tenant IHS, a tenant data structure comprising at least one tenant record, each tenant record including a data payload and one or more tenant-hashed tabular labels associated with the data payload;
- wherein the payload has been encrypted by the tenant IHS using a first encryption algorithm and a first encryption key;
- further encrypting the data payload using a second encryption algorithm and a second encryption key;
- assigning a block ID to the tenant record;
- creating a signature comprising a hash of the block ID and the one or more tabular labels;
- appending a tenant identifier associated with the tenant, and the signature, to the at least one tenant record of the tenant data structure;
- storing the at least one tenant record in the block chain system;
- and
- storing the block ID and the signature to the sidecar indexing database, and
- wherein the data payload is not stored to the sidecar indexing database.
13 more elements
Dependencies are inferred from the claim text.