Method for secure access to data
Provided are a system and a method for secure access to data, where the data comprises a number of data records each assigned to an entity, such as a user, and where the data records are stored in encrypted form in a database. A first decryption key assigned to a particular entity is used to decrypt the data records assigned to the particular entity. The first decryption keys are stored in a volatile memory, and the first decryption keys assigned to the particular entity are encrypted by an encryption key assigned to the particular entity, and the encrypted first decryption keys are stored in a permanent memory. After the volatile memory is cleared, the encrypted first decryption keys are copied from the permanent memory into the volatile memory, and in the volatile memory, the first decryption keys are decrypted by a second decryption key assigned to the particular entity.
1. Method for secure access to data, wherein
the data comprises a number of data records, wherein
the data records are each assigned to a particular entity (U) of a plurality of entities, preferably a user, and
the data records are stored in encrypted form in a database (DB), wherein a first decryption key (VK) assigned to the particular entity (U) is used to decrypt the data records assigned to the particular entity,
the first decryption keys (VK) are stored in a volatile memory (VMEM),
the first decryption keys (VK) assigned to the particular entity (U) are encrypted by an encryption key (K 1 ) assigned to the particular entity (U) (S 4 ), and the encrypted first decryption keys (VKK) are stored in a permanent memory (PMEM) (S 5 ), and
after the volatile memory (VMEM) is cleared (S 6 )
the encrypted first decryption keys (VKK) are copied from the permanent memory (PMEM) into the volatile memory (VMEM) (S 9 ), and
in the volatile memory (VMEM), the encrypted first decryption keys (VKK) are decrypted by a second decryption key (K 2 ) assigned to the particular entity (U),
wherein the access to the data records encrypted in the database (DB) is handled by an access control device (PGU), wherein access policies indicating who can access the encrypted data records and for what purpose are stored in the access control device (PGU), and
wherein all content in the volatile memory (VNEM) is deleted if the access policies are changed.
2. The method of claim 1 , wherein the encryption keys (K 1 ) and the second decryption keys (K 2 ) are generated by means of a secret (S) provided by the particular entity (U), wherein the secret (S) is provided by the particular entity (U) separately for the generation of the encryption keys (K 1 ) (S 1 ) and for the generation of the second decryption keys (K 2 ) (S 8 ).
3. The method of claim 2 , wherein the secret (S) is discarded or deleted after each of the generation (S 2 ) of the encryption keys (K 1 ) and the generation (S 10 ) of the second decryption keys (K 2 ) (S 2 . 1 ; S 10 . 1 ).
4. The method of claim 1 , wherein the encryption keys (K 1 ) are deleted or stored only in the volatile memory (VMEM) after the encryption (S 4 ) of the first decryption keys (VK).
5. The method of claim 1 , wherein the second decryption keys (K 2 ) are deleted or stored only in the volatile memory (VMEM) after the decryption (S 11 ) of the encrypted first decryption keys (VKK).
6. The method of wherein the access control device (PGU) is physically coupled to the volatile memory (VMEM), wherein if the access policies are changed, the access control device (PGU) is restarted, the volatile memory (VMEM) is also restarted on account of the physical coupling, and the first decryption keys (VK) stored in the volatile memory (VMEM) are deleted.