Systems and methods for secure storage of user information in a user profile
Systems and methods are provided for securely storing information of a user in a user profile to prevent access to the information and minimize the amount of information disclosed during a security breach. Information pertaining to a user is obtained from one or more sources and organized into a user profile and securely stored in a database. The user profile can be stored remotely in a cloud-based system at a remote encrypted server, with portions of the profile stored in separate locations with separate encryption to minimize the risk of unauthorized access to one portion of the information. The fields of data in the user profile can also be separately encrypted with separate encryption keys and separately stored in separate databases to minimize the amount of information which could be disclosed by the unauthorized access to a single encryption key or a single database.
1. A system for securely storing user information from a user profile, comprising:
data storage comprising a plurality of storage locations;
a profile creation unit configured to create the user profile comprising user information, the user information including user identifiable information and other information, to be stored in the data storage, wherein the user information includes a plurality of fields and a plurality of values corresponding to the plurality of fields;
a logic application server configure to:
dissociate the user profile from sections of a file that include other information,
disassemble the user profile into a plurality of separate pieces of identity information; and
individually encrypt each of the plurality of separate pieces of identity information comprising the user profile using a separate encryption key for each of the separate pieces of identity information; and
a data storage server configured to distribute each of the plurality of individually encrypted pieces of identity information for separate storage among the plurality of storage locations.
2. The system of claim 1 , wherein each of at least some of the plurality of fields comprises a user identity, a user financial information, a user password, a user address, and a user identification number.
3. The system of claim 1 , wherein: at least some of the plurality of sections comprising the user information include the plurality of values comprising the user information; and at least some of the plurality of sections comprise the corresponding fields comprising the user information.
4. The system of claim 1 , wherein: at least some of the plurality of sections comprising the user information include at least some of the plurality of values and at least some of the plurality of fields corresponding to the plurality of values.
5. The system of claim 1 , wherein at least some of the plurality of fields comprising the user information are identified based on information obtained from one or more of an existing electronic form, manual entry by a user, and a third party application interface.
6. The system of claim 1 , wherein the data storage server is configured to store each of the plurality of sections in a separate storage location.
7. The system of claim 1 , wherein the data storage server is further configured to store each encryption key used to encrypt each of the plurality of sections.
8. A method of securely storing user information from a user profile, comprising:
creating, with a profile creation unit, the user profile comprising user information, the user information including user identifiable information and other information, to be stored in data storage comprising a plurality of storage locations, wherein the user information includes a plurality of fields and a plurality of values corresponding to the plurality of fields;
dissociating, with a logic application server, the user profile from sections of a file that include other information,
disassembling, with a logic application server, the user profile into a plurality of separate pieces of identity information;
individually encrypting, with the logic application server, each of the plurality of separate pieces of identity information comprising the user profile using a separate encryption key for each of the separate pieces of identity information; and
distributing, with a data storage server, each of the plurality of individually encrypted pieces of identity information for separate storage among the plurality of storage locations.
9. The method of claim 8 , wherein each of at least some of the plurality of fields comprises one of a user identity, a user financial information, a user password, a user address, and a user identification number.
10. The method of claim 8 , wherein:
at least some of the plurality of sections comprising the user information include the plurality of values comprising the user information; and at least some of the plurality of sections comprise the corresponding fields comprising the user information.
11. The method of claim 8 , wherein:
at least some of the plurality of sections comprising the user information include at least some of the plurality of values and at least some of the plurality of fields corresponding to the plurality of values.
12. The method of claim 8 , wherein each of the plurality of sections is stored in a separate storage location.
13. The method of claim 8 , further comprising storing each encryption key used to encrypt each of the plurality of sections.