Method for accessing data in a secure manner

1. Method for accessing data in a secure manner, the method comprising:

the data comprises a number of data sets, wherein

each of the data sets is assigned to an entity (U), preferably a user, and

the data sets are stored in encrypted form in a database (DB), wherein a first decryption key (VK) assigned to the particular entity (U) is used to decrypt the data sets assigned to the particular entity,

the first decryption keys (VK) are stored in a volatile memory unit (VMEM),

each of the first decryption keys (VK) assigned to the particular entity (U) are encrypted using a first and at least a second encryption key (K 1 ) assigned to the particular entity (U) (S 4 ), and the at least two encrypted first decryption keys (VKK) resulting therefrom are stored in a permanent memory unit (PMEM) (S 5 ), and

after the volatile memory unit (VMEM) is erased (S 6 )

the encrypted first decryption keys (VKK) are copied from the permanent memory unit (PMEM) into the volatile memory unit (VMEM) (S 9 ), and

in the volatile memory unit (VMEM), the encrypted first decryption keys (VKK) are decrypted by a first and at least a second decryption key (K 2 ) assigned to the particular entity (U).

2. The method of claim 1 , wherein each of the encryption keys (K 1 ) assigned to the particular entity (U) and the second decryption keys (K 2 ) assigned to the particular entity (U) are generated using a secret (S) provided by the particular entity (U), wherein the secret (S) is provided by the respective entity (U) separately for generating the encryption keys (K 1 ) (S 1 ) and for generating the second decryption keys (K 2 ) (S 8 ), wherein the entity (U) provides a different secret (S) for each encryption key (K 1 ) and for each second decryption key (K 2 ).

3. The method of claim 2 , wherein each secret (S) is discarded or deleted after the generation (S 2 ) of the encryption keys (K 1 ) and after the generation (S 10 ) of the second decryption keys (K 2 ) (S 2 . 1 ; S 10 . 1 ).

4. The method of claim 1 , wherein each of the encryption keys (K 1 ) are deleted or stored only in the volatile memory unit (VMEM) after the encryption (S 4 ) of the first decryption keys (VK).

5. The method of claim 1 , wherein each of the second decryption keys (K 2 ) are deleted or stored only in the volatile memory unit (VMEM) after the decryption (S 11 ) of the encrypted first decryption keys (VKK).

6. The method of claim 1 , wherein access to the data sets encrypted in the database (DB) is handled by an access control device (PGU), wherein access policies indicating who can access the encrypted data records and for what purpose are stored in the access control device (PGU).

7. The method of claim 1 , wherein all contents in the volatile memory unit (VMEM) are deleted if the access policies are changed.

8. The method of claim 7 , wherein the access control device (PGU) is physically coupled to the volatile memory unit (VMEM), wherein if the access policies are changed, the access control device (PGU) is restarted, the volatile memory unit (VMEM) is also restarted on account of the physical coupling, and the first decryption keys (VK) stored in the volatile memory unit (VMEM) are deleted.

9. The method of claim 1 , wherein when encrypting the first decryption key (VK) an encrypted block (data block) is generated, wherein the encrypted block comprises:

the first decryption key (VK), and

metadata of the first decryption key (VK),

wherein the metadata of the first decryption key comprise:

information about an assignment of the first decryption key (VK) to an entity (U), and/or

information about an assignment of a plurality of access policies to an entity (U).