Granted Patent B1

US 9,413,526 · App. 13/844,353 · Granted Aug 9, 2016

Abstract

Claims (63)

1. A method for anonymizing data to be transmitted to a destination computing device, comprising:

providing a data encryption key;

encrypting the data encryption key with a key encryption key to derive an encrypted data encryption key;

encrypting the key encryption key using a KEK key to generate an encrypted key encryption key;

hashing the KEK key with a hash function to generate a hash of the KEK key;

storing the hash of the KEK key and encrypted key encryption key in a data store;

receiving data to be stored in a destination computing device, from a user computer, the data including a plurality of characters;

receiving a custodian password;

generating a hash of the custodian password using the hash function;

comparing the generated hash of the custodian password with the stored hash of the KEK key and when there is a match between the generated hash of the custodian password with the stored hash of the KEK key, decrypting the encrypted key encryption key using the custodian password to derive the key encryption key;

decrypting the encrypted data encryption key using the derived key encryption key to derive the data encryption key;

anonymizing the data to be stored using an anonymization module executed on a computing device to derive an anonymized data, based on a stored anonymization strategy, using the derived data encryption key; and

transmitting anonymized data to the destination computing device over a network, for storage in the destination computing device.

2. The method of claim 1 , further including providing a plurality of KEK keys;

generating a plurality of hash of the plurality of KEK keys;

storing a plurality of hash of the plurality of KEK keys;

receiving a plurality of custodian passwords;

generating corresponding plurality of hash of the plurality of custodian password; and

comparing the corresponding plurality of hash of the plurality of custodian

password with stored plurality of hash of the plurality of KEK keys for a match; and

using one of matched plurality of the custodian password to decrypt the encrypted key encryption key to derive the key encryption key.

3. The method of claim 2 , wherein hash of at least two custodian password have to match with stored plurality of hash of the plurality of KEK keys for a match.

4. The method of claim 1 , further including dividing the KEK key into a plurality of sub-KEK keys; and

upon validation of each of the plurality of sub-KEK keys, reassembling the plurality of sub-KEK keys to derive the KEK key.

5. The method of claim 1 , further including:

dividing the data encryption key into a plurality of sub-data encryption key;

providing a corresponding sub-key encryption key to encrypt each of the sub-data encryption key;

encrypting each of the sub-key encryption key with a corresponding sub-KEK key;

upon validation of each of the sub-KEK key, decrypting the sub-key encryption key using the sub-KEK key;

decrypting the sub-data encryption key using the corresponding decrypted sub-key encryption key to derive decrypted sub-data encryption key; and

reassembling the decrypted sub-data encryption key to derive the data encryption key.

6. An anonymization system to anonymize data transmitted to a destination computing device, comprising:

an anonymization strategy module executed on a computing device to store anonymization strategy for data anonymization in a data store;

a logic to receive data to be stored in the destination from a user computer; and

an anonymization module executed on the computing device to selectively anonymize data to be stored based on the anonymization strategy to generate an anonymized data using a data encryption key,

wherein, the data encryption key is encrypted with a key encryption key to derive an encrypted data encryption key;

the key encryption key is encrypted using a KEK key to generate an encrypted key encryption key;

the KEK key is hashed with a hash function to generate a hash of the KEK key;

the hash of the KEK key and encrypted key encryption key is stored in a data store;

the encrypted data encryption key is decrypted to derive the data encryption key prior to anonymization; and

the anonymized data is transmitted to the destination computing device over a network for storage in the destination computing device,

wherein the system is further configured to receive a custodian password;

generate a hash of the custodian password using the hash function;

compare the generated hash of the custodian password with the stored hash of the KEK key, and when there is a match between the generated hash of the custodian password with the stored hash of the KEK key, the custodian password is used to decrypt the encrypted key encryption key to derive the key encryption key; and

the encrypted data encryption key is decrypted using the derived key encryption key to derive the data encryption key.

7. The system of claim 6 , further including:

provide a plurality of KEK keys;

generate a plurality of hash of the plurality of KEK keys;

store the plurality of hash of the plurality of KEK keys in the data store;

receive a plurality of custodian passwords;

generate corresponding plurality of hash of the plurality of custodian password;

compare the corresponding plurality of hash of the plurality of custodian password with stored plurality of hash of the KEK keys for a match; and

one of the matched plurality of the custodian password is used to decrypt the encrypted key encryption key to derive the key encryption key.

8. The system of claim 7 , wherein hash of at least two custodian password have to match with stored plurality of hash of the plurality of KEK keys for a match.

9. The system of claim 6 , wherein, the KEK key is divided into a plurality of sub-KEK keys; and

upon validation of each of the plurality of sub-KEK keys, the plurality of sub-KEK keys are reassembled to derive the KEK key.

10. The system of claim 6 , wherein,

the data encryption key is divided into a plurality of sub-data encryption key;

each of the sub-data encryption key is encrypted using a corresponding sub-key encryption key;

each of the sub-key encryption key is encrypted with a corresponding sub-KEK key;

upon validation of each of the sub-KEK key, the sub-key encryption key is decrypted using the validated sub-KEK key;

each of the sub-data encryption key is decrypted using the corresponding decrypted sub-key encryption key to derive corresponding decrypted sub-data encryption key; and

the decrypted sub-data encryption keys are reassembled to derive the data encryption key.

Assignments (14)