Granted Patent B2

US 8,726,017 · App. 13/236,541 · Granted May 13, 2014

Abstract

Claims (62)

1. A computer-implemented method for data management, comprising:

obtaining information associated with an encryption key, the information comprising an encryption time period for the encryption key;

determining whether the encryption key is valid based on at least the encryption time period;

deactivating, with at least one processor, the encryption key when the encryption key is invalid;

identifying at least one database including encrypted data associated with the deactivated encryption key and with one or more additional encryption keys, the at least one database having a database time period, the encrypted data being associated with corresponding times that fall within the encryption time period and the database time period;

in response to the encryption key being deactivated, disabling, with the at least one processor, access to the encrypted data associated with the deactivated encryption key and included in the at least one database;

in response to determining that at least one of the one or more additional encryption keys is not valid and that the database time period has elapsed, making the encrypted data in the at least one database associated with each of the one or more additional encryption keys irretrievable; and

wherein the encrypted data that is associated with the deactivated encryption key and included in the at least one database remain retrievable until a determination that all encryption keys are not valid and that the database time period has elapsed.

2. The method of claim 1 , further comprising:

receiving a plurality of data;

selecting a subset of the received data associated with corresponding times that fall within the encryption time period; and

encrypting the subset of the received data using the encryption key to generate the encrypted data.

3. The method of claim 2 , further comprising receiving information identifying a plurality of databases associated with corresponding database time periods.

4. The method of claim 3 , further comprising:

selecting the at least one database from the plurality of databases;

determining whether the database time period associated with the at least one database includes the times associated with the encrypted data; and

storing the encrypted data in the at least one database when the database time period associated with the at least one database includes the encrypted data times.

5. The method of claim 1 , wherein determining whether the encryption key is valid comprises:

determining whether the encryption time period has expired; and

determining that the encryption key is invalid when the encryption time period has expired.

6. The method of claim 5 , wherein deactivating the encryption key comprises:

deactivating the encryption key at a predetermined time after the encryption time period has expired.

7. The method of claim 1 , wherein disabling access to the encrypted data associated with the deactivated encryption key and included in the at least one database comprises:

deleting the encrypted data from the at least one database.

8. The method of claim 1 , wherein disabling access to the encrypted data associated with the deactivated encryption key and included in the at least one database comprises:

identifying an access level associated with the user; and

modifying the ability of the user to access the encrypted data in accordance with the identified access level.

9. An apparatus, comprising:

a storage device that stores a set of instructions; and

at least one processor that is coupled to the storage device, the at least one processor configured to execute the set of instructions to:

obtaining information associated with an encryption key, the information comprising an encryption time period for the encryption key;

determining whether the encryption key is valid based on at least the encryption time period;

deactivating the encryption key when the encryption key is invalid;

identifying at least one database including encrypted data associated with the deactivated encryption key and with one or more additional encryption keys, the at least one database having a database time period, the encrypted data being associated with corresponding times that fall within the encryption time period and the database time period;

in response to the encryption key being deactivated, disabling access to the encrypted data associated with the deactivated encryption key and included in the at least one database;

in response to determining that at least one of the one or more additional encryption keys is not valid and that the database time period has elapsed, making the encrypted data in the at least one database associated with each of the one or more additional encryption keys irretrievable; and

wherein the encrypted data that is associated with the deactivated encryption key and included in the at least one database remain retrievable until a determination that all encryption keys are not valid and that the database time period has elapsed.

10. The apparatus of claim 9 wherein the processor is further configured to execute the instructions to:

receive a plurality of data;

select a subset of the received data associated with corresponding times that fall within the encryption time period; and

encrypt the subset of the received data using the encryption key to generate the encrypted data.

11. The apparatus of claim 10 , wherein the processor is further configured to execute the instructions to:

receive information identifying a plurality of databases associated with corresponding database time periods;

select the at least one database from the plurality of databases;

determine whether the database time period associated with the at least one database includes the times associated with the encrypted data; and

store the encrypted data in the at least one database when the database time period associated with the at least one database includes the encrypted data times.

12. The apparatus of claim 9 , wherein the processor is further configured to execute the instructions to:

determine whether the encryption time period has expired; and

determine that the encryption key is invalid when the encryption time period has expired.

13. The apparatus of claim 12 , wherein the processor is further configured to execute the instructions to deactivate the encryption key at a predetermined time after the encryption time period has expired.

14. The apparatus of claim 9 , wherein the processor is further configured execute the instructions to disable access to the encrypted data by deletion of the encrypted data from the at least one database.

15. The apparatus of claim 9 , wherein processor is further configured to execute the instructions to disable access to the encryption data by:

identification of an access level associated with a user; and

modification of the ability of the user to access the encrypted data in accordance with the identified access level.

16. A non-transitory computer-readable storage media storing instructions that are executable by at least one processor to perform a method for data management, the method comprising:

obtaining information associated with an encryption key, the information comprising an encryption time period for the encryption key;

determining whether the encryption key is valid based on at least the encryption time period;

deactivating the encryption key when the encryption key is invalid;

identifying at least one database including encrypted data associated with the deactivated encryption key and with one or more additional encryption keys, the at least one database having a database time period, the encrypted data being associated with corresponding times that fall within the encryption time period and the database time period;

in response to the encryption key being deactivated, disabling access to the encrypted data associated with the deactivated encryption key and included in the at least one database;

in response to determining that at least one of the one or more additional encryption keys is not valid and that the database time period has elapsed, making the encrypted data in the at least one database associated with each of the one or more additional encryption keys irretrievable; and

wherein the encrypted data that is associated with the deactivated encryption key and included in the at least one database remain retrievable until a determination that all encryption keys are not valid and that the database time period has elapsed.

Assignments (6)