IP Library Granted Patent US 10,289,865
Granted Patent B1
US 10,289,865 · App. 15/063,538 · Granted May 14, 2019

Systems and methods for providing kinship-based accessibility to securely stored data

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,289,865
App. No.
15/063,538
Granted
May 14, 2019
Kind
B1
Abstract

A computer-implemented method for providing kinship-based accessibility to securely stored data may include (1) identifying encrypted data that is encrypted with a first cryptographic key which was derived from heritable biometric information obtained from a first person, (2) receiving heritable biometric information obtained from a second person related to the first person within a predetermined degree, (3) generating a second cryptographic key based at least in part on the heritable biometric information obtained from the second person, and (4) decrypting the encrypted data that is encrypted with the first cryptographic key derived from the heritable biometric information obtained from the first person by using the second cryptographic key generated based at least in part on the heritable biometric information obtained from the second person. Various other methods, systems, and computer-readable media are also disclosed.

Claims (59)

1. A computer-implemented method for providing kinship-based accessibility to securely stored data, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising:

identifying encrypted data that is encrypted with a first cryptographic key which was derived from heritable biometric information obtained from a first person;

receiving heritable biometric information obtained from a second person related to the first person within a predetermined degree;

generating a second cryptographic key based at least in part on the heritable biometric information obtained from the second person;

decrypting the encrypted data that is encrypted with the first cryptographic key derived from the heritable biometric information obtained from the first person by using the second cryptographic key generated based at least in part on the heritable biometric information obtained from the second person; and

providing access to the encrypted data to the second person after decrypting the encrypted data;

wherein the heritable biometric information obtained from the first person comprises a plurality of genetic markers obtained from the first person and the heritable biometric information obtained from the second person comprises a plurality of genetic markers obtained from the second person.

2. The computer-implemented method of claim 1 , wherein the first person comprises a first female person.

3. The computer-implemented method of claim 2 , wherein:

the heritable biometric information obtained from the first person is derived from mitochondrial DNA obtained from the first person; and

the heritable biometric information obtained from the second person is derived from mitochondrial DNA obtained from the second person.

4. The computer-implemented method of claim 1 , wherein:

the first person comprises a first male person;

the second person comprises a second male person;

the heritable biometric information obtained from the first person is derived from a Y chromosome of the first person; and

the heritable biometric information obtained from the second person is derived from a Y chromosome of the second person.

5. The computer-implemented method of claim 1 , wherein the encrypted data is encrypted with the first cryptographic key using a k-out-of-n encryption scheme.

6. The computer-implemented method of claim 5 , wherein:

the first cryptographic key was derived from a plurality of allele pairs present in the first person; and

generating the second cryptographic key comprises selecting, for each allele pair in the plurality of allele pairs, an allele in a corresponding allele pair of the second person to contribute to the second cryptographic key.

7. The computer-implemented method of claim 6 , wherein generating the second cryptographic key comprises:

generating a plurality of candidate cryptographic keys by selecting, for each candidate cryptographic key in the plurality of candidate cryptographic keys, a different combination of alleles from a plurality of allele pairs present in the second person that correspond to the plurality of allele pairs present in the first person; and

testing each candidate cryptographic key in the plurality of candidate cryptographic keys until identifying the second cryptographic key that successfully decrypts the encrypted data.

8. The computer-implemented method of claim 5 , wherein a parameter of the k-out-of-n encryption scheme is selected based at least in part on a relationship requirement for decrypting the encrypted data that specifies how closely related the first person and a candidate person are to be related for the candidate person to access the encrypted data in plaintext form.

9. The computer-implemented method of claim 5 , wherein a parameter of the k-out-of-n encryption scheme is selected based at least in part on a computational threshold, wherein a computational burden imposed by searching for the second cryptographic key based on heritable biometric information obtained from the second person falls below the computational threshold and a computational burden imposed by searching for the second cryptographic key without heritable biometric information obtained from any person with a genetic relationship to the first person as close as a genetic relationship between the first person and the second person rises above the computational threshold.

10. The computer-implemented method of claim 1 , wherein generating the second cryptographic key is further based at least in part on heritable biometric information obtained from a third person related to the first person.

11. The computer-implemented method of claim 1 , wherein the encrypted data is stored on behalf of the first person pseudonymously.

12. The computer-implemented method of claim 1 , wherein decrypting the encrypted data comprises decrypting an additional cryptographic key.

13. The computer-implemented method of claim 12 , wherein the additional cryptographic key is capable of decrypting private data owned by the first person.

14. A system for providing kinship-based accessibility to securely stored data, the system comprising:

an identification module, stored in memory, that identifies encrypted data that is encrypted with a first cryptographic key which was derived from heritable biometric information obtained from a first person;

a receiving module, stored in memory, that receives heritable biometric information obtained from a second person related to the first person within a predetermined degree;

a generation module, stored in memory, that generates a second cryptographic key based at least in part on the heritable biometric information obtained from the second person;

a decryption module, stored in memory, that:

decrypts the encrypted data that is encrypted with the first cryptographic key derived from the heritable biometric information obtained from the first person by using the second cryptographic key generated based at least in part on the heritable biometric information obtained from the second person; and

provides access to the encrypted data to the second person after decrypting the encrypted data; and

at least one physical processor configured to execute the identification module, the receiving module, the generation module, and the decryption module;

wherein the heritable biometric information obtained from the first person comprises a plurality of genetic markers obtained from the first person and the heritable biometric information obtained from the second person comprises a plurality of genetic markers obtained from the second person.

15. The system of claim 14 , wherein the first person comprises a first female person.

16. The system of claim 15 , wherein:

the second person comprises a second female person;

the heritable biometric information obtained from the first person is derived from mitochondrial DNA obtained from the first person; and

the heritable biometric information obtained from the second person is derived from mitochondrial DNA obtained from the second person.

17. The system of claim 14 , wherein:

the first person comprises a first male person;

the second person comprises a second male person;

the heritable biometric information obtained from the first person is derived from a Y chromosome of the first person; and

the heritable biometric information obtained from the second person is derived from a Y chromosome of the second person.

18. The system of claim 14 , wherein the encrypted data is encrypted with the first cryptographic key using a k-out-of-n encryption scheme.

19. The system of claim 18 , wherein:

the first cryptographic key was derived from a plurality of allele pairs present in the first person; and

the generation module generates the second cryptographic key by selecting, for each allele pair in the plurality of allele pairs, an allele in a corresponding allele pair of the second person to contribute to the second cryptographic key.

20. A non-transitory computer-readable medium comprising one or more computer-readable instructions that, when executed by at least one processor of a computing device, cause the computing device to:

identify encrypted data that is encrypted with a first cryptographic key which was derived from heritable biometric information obtained from a first person;

receive heritable biometric information obtained from a second person related to the first person within a predetermined degree;

generate a second cryptographic key based at least in part on the heritable biometric information obtained from the second person;

decrypt the encrypted data that is encrypted with the first cryptographic key derived from the heritable biometric information obtained from the first person by using the second cryptographic key generated based at least in part on the heritable biometric information obtained from the second person; and

provide access to the encrypted data to the second person after decrypting the encrypted data;

wherein the heritable biometric information obtained from the first person comprises a plurality of genetic markers obtained from the first person and the heritable biometric information obtained from the second person comprises a plurality of genetic markers obtained from the second person.

Assignments (6)
CHANGE OF NAME Recorded Feb 6, 2023
From: NORTONLIFELOCK INC.
To: GEN DIGITAL INC.
Reel/Frame 062714/0605 →
NOTICE OF SUCCESSION OF AGENCY (REEL 050926 / FRAME 0560) Recorded Sep 13, 2022
From: JPMORGAN CHASE BANK, N.A.
To: BANK OF AMERICA, N.A., AS COLLATERAL AGENT
Reel/Frame 061422/0371 →
SECURITY AGREEMENT Recorded Sep 13, 2022
From: NORTONLIFELOCK INC.
To: BANK OF AMERICA, N.A., AS COLLATERAL AGENT
Reel/Frame 062220/0001 →
CHANGE OF NAME Recorded Feb 14, 2020
From: SYMANTEC CORPORATION
To: NORTONLIFELOCK INC.
Reel/Frame 051935/0228 →
SECURITY AGREEMENT Recorded Nov 4, 2019
From: SYMANTEC CORPORATION; BLUE COAT LLC; LIFELOCK, INC,; SYMANTEC OPERATING CORPORATION
To: JPMORGAN, N.A.
Reel/Frame 050926/0560 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 8, 2016
From: SOKOLOV, ILYA; JIANG, KEVIN
To: SYMANTEC CORPORATION
Reel/Frame 037915/0928 →