Back to results
US 2024/0403448 A1Published application
System and method for operating a secure database
AssigneeThe Ethical Identity Company
InventorsJonathan Chan, Travis Howe
Life of this patent
Estimating the term…
Abstract
Various implementations of a system and method may include a secure database that can be structured with a strong emphasis on individual entity permissions and enforcement of read, write, and audit policies relative to individual database record entries to close security and privacy gaps that exist in current database systems.
Claims20
An active node of a secure database system, comprising:
- at least one processor;
- and
- at least one memory that stores computer executable instructions, wherein, when the computer executable instructions are executed by the at least one processor, the at least one processor are configured to:
- receive a request to store a private data record;
- encrypt the private data record with a first randomly generated data key to result in an encrypted private data record;
- encrypt the first randomly generated data key using a first type of encryption and a second randomly generated data key to result in a first encrypted system access key;
- encrypt the second randomly generated data key using a second type of encryption to result in at least one second encrypted system access key, wherein the second type of encryption uses a public key from a randomly selected node of a plurality of nodes that, with the active node, form part of the secure database system;
- transmit the encrypted private data record to a plurality of nodes for validation;
- add the encrypted private data record to a datastore in the node based on validating that the encrypted private data record can be written to a datastore and receiving messages from the plurality of nodes that the encrypted private data record can be written to the datastore, wherein the datastore mirrors other datastores associated with respective nodes of the plurality of nodes;
- store the first encrypted system access key and the at least one second encrypted system access key in an external access key database;
- and
- enable decryption access to the encrypted private data record using the at least one second encrypted system access key based on consensus authorization with the plurality of nodes.
9 more elements
A method of operating a secure database system, comprising:
- receiving a request to store a private data record;
- encrypting the private data record with a first randomly generated data key to result in an encrypted private data record;
- encrypting the first randomly generated data key using a first type of encryption and a second randomly generated data key to result in a first encrypted system access key;
- encrypting the second randomly generated data key using a second type of encryption to result in at least one second encrypted system access key, wherein the second type of encryption uses a public key from a randomly selected node of a plurality of nodes that, with the active node, form part of the secure database system;
- transmitting the encrypted private data record to a plurality of nodes for validation;
- adding the encrypted private data record to a datastore in the node based on validating that the encrypted private data record can be written to a datastore and receiving messages from the plurality of nodes that the encrypted private data record can be written to the datastore, wherein the datastore mirrors other datastores associated with respective nodes of the plurality of nodes;
- storing the first encrypted system access key and the at least one second encrypted system access key in an external access key database;
- and
- enabling decryption access to the encrypted private data record using the at least one second encrypted system access key based on consensus authorization with the plurality of nodes.
6 more elements
Dependencies are inferred from the claim text.