Methods and apparatus for sharing encrypted data

1. A data search method performed by a device comprising

a computer usable medium that physically embodies a secret, a core, a plaintext, an encrypted record, a search expression for the plaintext, an index, an encrypted index, a first key, and a second key, wherein the method overwrites the secret, the plaintext, the expression, the index, the first key, and the second key from the medium, after performing the steps of:

processing the plaintext to obtain the core and the index, wherein the index is coupled with a location within the core;

encrypting the index;

encrypting the plaintext to obtain the encrypted record;

registering the encrypted record into the core at the location;

associating the first key with decrypting the encrypted record and the second key with decrypting the encrypted index;

associating the secret with the first key, the second key, the encrypted index, and the core;

obtaining the core associated with the secret;

obtaining the encrypted index associated with the secret;

decrypting the encrypted index by using the first key;

decrypting the encrypted record by using the second key;

processing the expression against the index to obtain the location;

obtaining the encrypted record at the location from the core; and

decrypting the encrypted record by using the key associated with the secret to obtain the plaintext.

2. A data search method performed by a device comprising a

computer usable medium that physically embodies a secret, an identity, and an encrypted secret, wherein the method overwrites the identity and the secret from the medium after performing the steps of:

processing a plaintext to obtain a core and an index, wherein the index is coupled with a location within the core;

encrypting the index;

encrypting the plaintext to obtain an encrypted record;

registering the encrypted record into the core at the location;

associating a key with decrypting the encrypted record and decrypting the encrypted index;

associating the secret with the key, the encrypted index, and the core;

encrypting the secret;

associating a first user-key with decryption of the encrypted secret;

associating the identity with the first user-key;

authenticating the first user-key by using the identity;

obtaining the encrypted secret associated with the first user-key;

obtaining the secret by decrypting the encrypted secret with the first user-key;

associating a second user-key with the decryption;

associating a second identity with the second user-key;

authenticating the second user-key by using the second identity;

obtaining the encrypted secret associated with the second user-key; and

obtaining the secret by decrypting the encrypted secret with the second user-key.

3. A computer system for searching of encrypted data records, the computer system comprising:

A processor(s) set; and

A computer readable storage medium;

Wherein:

The processor set is structured, located, connected and/or programmed to run computer readable program code physically embodied on the computer usable medium; and

The computer readable program code is programmed to perform the steps of:

providing a secret and a plaintext;

processing the plaintext to obtain a core and an index, wherein the index is coupled with a location within the core;

encrypting the index;

encrypting the plaintext to obtain an encrypted record;

registering the encrypted record into the core at the location;

associating a key with decrypting the encrypted record and decrypting the encrypted index; and

associating the secret with the key, the encrypted index, and the core.