Secure document repository
AssigneeBank of America Corporation
InventorManu Jacob Kurian
Life of this patent
Estimating the term…
Abstract
Embodiments for secure data storage that include systems and methods that receive, from a second system maintained by a second entity, a data payload to be stored by the system; secure the data payload at a first time; store the secured data payload; receive a request for access to the data payload; and provide certification, corresponding to a second time subsequent to the first time, that the data payload has not been altered since the first time.
Claims12
A system for providing secure data payload storage, whereby the system provides certification of the security of stored data payloads, the system comprising:
- a first computer apparatus maintained by a first entity and including a processor and a memory;
- and a software module stored in the memory, comprising executable instructions that when executed by the processor cause the processor to secure a data payload by a first encryption, thereby resulting in a first secured data payload;
- and to transmit the first secured data payload to a second computer apparatus;
- and
- a second computer apparatus maintained by a second entity and operatively coupled with the first computer apparatus and including a processor and a memory;
- and a software module stored in the memory, comprising executable instructions that when executed by the processor cause the processor to:
- receive, from the first computer apparatus, the first secured data payload to be stored by the second apparatus;
- secure the first secured data payload at a first time by securing the first secured data payload by a second encryption, thereby resulting in a second secured data payload;
- store the second secured data payload;
- provide access to the second secured data payload to a third party for encryption by a third encryption, thereby resulting in a third secured data payload;
- store the third secured data payload;
- receive a request for access to the data payload;
- provide access to the third secured data payload to the third party for decryption by the third encryption, thereby resulting in the second secured data payload;
- decrypt the second secured data payload;
- transmit the second secured data payload to the first computer apparatus for decryption of the second secured data payload by the first encryption, thereby resulting in a decrypted data payload;
- provide certification, corresponding to a second time subsequent to the first time, that the data payload has not been altered since the first time;
- and
- provide access to the decrypted data payload to the requester.
A computer program product for providing secure data access, the computer program product comprising:
- a non-transitory computer readable storage medium having computer readable program code embodied therewith, the computer readable program code comprising:
- first computer readable program code configured to cause a first computer apparatus, when executed, to secure a data payload by a first encryption, thereby resulting in a first secured data payload;
- and to transmit the first secured data payload to a second computer apparatus;
- second computer readable program code configured to cause a second computer apparatus, when executed, to:
- receive, from the first computer apparatus, the first secured data payload to be stored by the second apparatus;
- secure the first secured data payload at a first time by securing the first secured data payload by a second encryption, thereby resulting in a second secured data payload;
- store the second secured data payload;
- provide access to the second secured data payload to a third party for encryption by a third encryption, thereby resulting in a third secured data payload;
- store the third secured data payload;
- receive a request for access to the data payload;
- provide access to the third secured data payload to the third party for decryption by the third encryption, thereby resulting in the second secured data payload;
- decrypt the second secured data payload;
- transmit the second secured data payload to the first computer apparatus for decryption of the second secured data payload by the first encryption, thereby resulting in a decrypted data payload;
- provide certification, corresponding to a second time subsequent to the first time, that the data payload has not been altered since the first time;
- and
- provide access to the decrypted data payload to the requester.
A computer-implemented method for providing secure data access, the method comprising:
- securing, by a first computing device processor, a data payload by a first encryption, thereby resulting in a first secured data payload;
- transmitting, by the first computing device processor, the first secured data payload to a second computing device processor of a second computer apparatus;
- receiving, using a second computing device processor, the first secured data payload to be stored by the second apparatus;
- securing, using the second computing device processor, the first secured data payload at a first time by securing the first secured data payload by a second encryption, thereby resulting in a second secured data payload;
- storing, using the second computing device processor, the second secured data payload;
- providing, using the second computing device processor, access to the second secured data payload to a third party for encryption by a third encryption, thereby resulting in a third secured data payload;
- storing, using the second computing device processor, the third secured data payload;
- receiving, using the second computing device processor, a request for access to the data payload;
- providing, using the second computing device processor, access to the third secured data payload to the third party for decryption by the third encryption, thereby resulting in the second secured data payload;
- decrypting, using the second computing device processor, the second secured data payload;
- transmitting, using the second computing device processor, the second secured data payload to the first computer apparatus for decryption of the second secured data payload by the first encryption, thereby resulting in a decrypted data payload;
- providing certification, using the second computing device processor, corresponding to a second time subsequent to the first time, that the data payload has not been altered since the first time;
- and
- providing, using the second computing device processor, access to the decrypted data payload to the requester.
Dependencies are inferred from the claim text.