Method and system for anonymous user data storage and controlled data access
Methods and systems are configured to store user data and control access to the user data, wherein the data is stored remotely from the user (such as external to a user's computing device) and the user's data is maintained anonymously. Content is stored in association with a user identifier and access by third parties is controlled by linked third party identifiers.
1. A method of anonymously storing and selectively controlling access to a user's data comprising the steps of:
receiving, via at least one communication interface of a server comprising a processor and a memory device, a first user private unique identifier from a first user;
transmitting, from said at least one communication interface of said server to a device of said first user, a first user public unique identifier;
receiving, via at least one communication interface of a server comprising a processor and a memory device, a second user private unique identifier from a second user;
transmitting, from said at least one communication interface of said server to a device of said second user, a second user public unique identifier;
receiving, via said at least one communication interface of said server, content from said first user along with said first user private unique identifier, an access designation from said first user of one or more third parties that may access said content, said access designation comprising said second user public unique identifier of said second user, and an encryption key of said first user;
generating, by said server, a content identifier for said content;
storing, at said memory device of said server, said content as encrypted by said first user's encryption key, in association with said content identifier and said access designation;
receiving, via said at least one communication interface of said server, a request to access said content from said second user, said request comprising said second user private unique identifier, said content identifier and the encryption key of said first user;
validating access of said second user to said content at said server by matching said second user private unique identifier provided by said second user to said second user public unique identifier associated with said content; and
when access is validated, decrypting said content using said key of said first user and providing access to said content to said second user.
2. The method in accordance with claim 1 wherein said first user private unique identifier is generated by software executed by a processor of a first user computing device and transmitted from said first user computing device to said server.
3. The method in accordance with claim 2 wherein said first user computing device generates said first user encryption key for encrypting and decrypting said content.
4. The method in accordance with claim 3 wherein said first user encryption key comprises a first portion for encrypting content and a second portion for decrypting content, wherein said first user provides said first portion for encrypting said content and provides said second portion to said second user for use by said server in decrypting said content.
5. The method in accordance with claim 4 , further comprising said server receiving a request by said first user to transmit said second portion of said decryption key to said second user and transmitting said second portion of said decryption key to said second user.
6. The method in accordance with claim 1 wherein said access designation from said first user of one or more third parties may comprise a designation of a plurality of different second users.
7. The method in accordance with claim 1 wherein said first user encryption key is generated using at least said first user's first user public unique identifier.
8. The method in accordance with claim 1 wherein said step of providing access to said content to said second user comprises transmitting said decrypted content to said device of said second user.
9. The method in accordance with claim 1 further comprising said first user providing said first user public identifier to said second user and said second user providing said second user public identifier to said first user.
10. The method in accordance with claim 1 wherein each of said first user private identifier, said first user public identifier, said second user private identifier and said second user public identifier comprise a universally unique ID (UUID) or globally unique ID (GUID).
11. The method in accordance with claim 10 wherein said content identifier comprises a UUID or GUID.