Method and system for fully encrypted repository
AssigneeOneid Inc.
InventorSteven Todd Kirsch
Life of this patent
Estimating the term…
Abstract
According to an embodiment of the present invention, a method for using information in conjunction with a data repository includes encrypting data associated with the information with an encryption key, sending at least the encrypted data to the data repository, and possibly deleting the information. The method also includes receiving a request for the information from a remote device, and sending a request for the encrypted data to the data repository. The method further includes receiving the encrypted data from the data repository, decrypting the encrypted data using the encryption key, and sending the information to the remote device.
Claims21
1-20. (canceled)
A method for authorizing a transaction, the method comprising:
- receiving, at an application operating on a first user device, information associated with authorizing the transaction, the information being received from a device of a transaction partner;
- providing, at the application operating on the first user device, a first digital signature authorizing the transaction, the first digital signature being generated using a first cryptographic key stored on the first user device;
- sending, from the application operating on the first user device to an identity repository, a request to authorize the transaction, wherein the identity repository is remotely located away from the first user device and is accessed over the Internet;
- receiving, at the application operating on the first user device and from the identity repository, a second digital signature authorizing the transaction, the second digital signature being provided by the identity repository using a second cryptographic key stored at the identity repository;
- and
- sending, from the application operating on the first user device to the device of the transaction partner, the first digital signature and the second digital signature, wherein the device of the transaction partner authorizes the transaction by verifying the first digital signature and the second digital signature using paired keys of the first cryptographic key and the second cryptographic key.
A non-transitory computer readable medium comprising instructions that, when executed by one or more processors, cause the one or more processors to perform operations comprising:
- receiving, at an application operating on a first user device, information associated with authorizing the transaction, the information being received from a device of a transaction partner;
- providing, at the application operating on the first user device, a first digital signature authorizing the transaction, the first digital signature being generated using a first cryptographic key stored on the first user device;
- sending, from the application operating on the first user device to an identity repository, a request to authorize the transaction, wherein the identity repository is remotely located away from the first user device and is accessed over the Internet;
- receiving, at the application operating on the first user device and from the identity repository, a second digital signature authorizing the transaction, the second digital signature being provided by the identity repository using a second cryptographic key stored at the identity repository;
- and
- sending, from the application operating on the first user device to the device of the transaction partner, the first digital signature and the second digital signature, wherein the device of the transaction partner authorizes the transaction by verifying the first digital signature and the second digital signature using paired keys of the first cryptographic key and the second cryptographic key.
A system comprising:
- one or more processors;
- and
- one or more memory devices comprising instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
- receiving, at an application operating on the system, information associated with authorizing the transaction, the information being received from a device of a transaction partner;
- providing, at the application operating on the system, a first digital signature authorizing the transaction, the first digital signature being generated using a first cryptographic key stored on the system;
- sending, from the application operating on the system to an identity repository, a request to authorize the transaction, wherein the identity repository is remotely located away from the system and is accessed over the Internet;
- receiving, at the application operating on the system and from the identity repository, a second digital signature authorizing the transaction, the second digital signature being provided by the identity repository using a second cryptographic key stored at the identity repository;
- and
- sending, from the application operating on the system to the device of the transaction partner, the first digital signature and the second digital signature, wherein the device of the transaction partner authorizes the transaction by verifying the first digital signature and the second digital signature using paired keys of the first cryptographic key and the second cryptographic key.
Dependencies are inferred from the claim text.