Encryption and decryption of records in accordance with group access vectors

A system to facilitate an appropriate access to secure information by a plurality of users categorized into a plurality of groups, comprising:

• an encryption engine configured to:
• determine a group access vector for each of a plurality of records in a data report, each group access vector including a plurality of indicators that indicate which record among the plurality of records an associated group is authorized to access, where the determined group access vector is a Boolean representation based on respective permissions for each user of the plurality of users of the associated group;
• on a group access vector by group access vector basis, arrange for a unique encryption key to be assigned to each unique group access vector associated with the data report;
• arrange for each record in the data report to be encrypted in accordance with the encryption key assigned to the group access vector of that record, the combined encrypted records comprising an encrypted data report;
• distribute the encrypted data report to a user device;
• a content management system configured to compute a binary intersection between a group membership vector and the associated group access vector and, if the binary intersection includes at least one true bit, decrypt at least a portion of the encrypted data report using decryption keys.

A method to facilitate an appropriate access to secure information by a plurality of users categorized into a plurality of groups, comprising:

• determining a group access vector for each of a plurality of records in a data report, each group access vector including a plurality of indicators that indicate which record among the plurality of records an associated group is authorized to access, where the determined group access vector is a Boolean representation based on respective permissions for each user of the plurality of users of the associated group;
• on a group access vector by group access vector basis, arranging for a unique encryption key to be assigned to each unique group access vector associated with the data report;
• arranging for each record in the data report to be encrypted in accordance with the encryption key assigned to the group access vector of that record, the combined encrypted records comprising an encrypted data report;
• distributing the encrypted data report to a user device;
• computing a binary intersection between a group membership vector and the associated group access vector;
• and
• if the binary intersection includes at least one true bit, decrypting at least a portion of the encrypted data report using decryption keys.