Database exclusion (DBX) for multi-party access (MPA) to sensitive personal information (SPI)
A system and method for protecting Sensitive Personal Information (SPI) from Multi-Party Access (MPA), including receiving a request for access to a data record, the request comprising an encrypted device identifier identifying the client device, encrypting the data record using a random symmetric key to generate an encrypted data record, encrypting the data record using a second symmetric key to generate a second encrypted data record, the second symmetric key being different from the random symmetric key, encrypting the random symmetric key to generate an encrypted symmetric key by using a public key associated with the client device or a key encryption key associated with the one or more processors, and transmitting a message comprising the encrypted symmetric key and the encrypted device identifier. The message causing the client device to access the data record using a database, the encrypted device identifier, and the encrypted symmetric key.
1. A method, comprising:
transmitting, by a client device and to a system, a request for access to a data record, the request comprising an encrypted device identifier identifying the client device;
receiving, by the client device from the system, a message comprising an encrypted symmetric key and the encrypted device identifier; and
in response to receiving the message, accessing, by the client device, the data record using a database, the encrypted device identifier, and the encrypted symmetric key.
2. The method of claim 1 , further comprising in response to receiving the message, retrieving, by the client device, the data record from the database.
3. The method of claim 1 , wherein
the data record is encrypted; and
the method further comprising in response to receiving the message, decrypting, by the client device, the encrypted data record using a random symmetric key determined from the encrypted symmetric key.
4. The method of claim 3 , wherein the random symmetric key is generated using a pseudorandom number generator (PRNG).
5. The method of claim 1 , further comprising in response to receiving the message, discarding, by the client device, an encrypted symmetric key responsive to an elapse of a predetermined window of time.
6. The method of claim 1 , wherein the request comprises a public key of the client device.
7. The method of claim 1 , wherein
an encrypted data record is access by the client device in response to receiving the message;
the data record is stored in a second database prior to the system receiving the request;
the encrypted data record is stored in database in response to the system receiving the request.
8. A client device comprising:
one or more memory devices; and
one or more processors configured to:
transmit to a system, a request for access to a data record, the request comprising an encrypted device identifier identifying the client device;
receive a message comprising an encrypted symmetric key and the encrypted device identifier; and
in response to receiving the message, access the data record using a database, the encrypted device identifier, and the encrypted symmetric key.
9. The client device of claim 8 , the one or more processors further configured to in response to receiving the message, retrieve the data record from the database.
10. The client device of claim 8 , wherein
the data record is encrypted; and
the one or more processors further configured to in response to receiving the message, decrypting, by the client device, the encrypted data record using a random symmetric key determined from the encrypted symmetric key.
11. The client device of claim 10 , wherein the random symmetric key is generated using a pseudorandom number generator (PRNG).
12. The client device of claim 8 , the one or more processors further configured to in response to receiving the message, discard an encrypted symmetric key responsive to an elapse of a predetermined window of time.
13. The client device of claim 8 , wherein the request comprises a public key of the client device.
14. The client device of claim 8 , wherein
an encrypted data record is access by the client device in response to receiving the message;
the data record is stored in a second database prior to the system receiving the request;
the encrypted data record is stored in database in response to the system receiving the request.
15. At least one non-transitory computer-readable storage medium storing instructions which, when executed by one or more processors, cause the one or more processors to:
transmit to a system, a request for access to a data record, the request comprising an encrypted device identifier identifying the client device;
receive a message comprising an encrypted symmetric key and the encrypted device identifier; and
in response to receiving the message, access the data record using a database, the encrypted device identifier, and the encrypted symmetric key.
16. The non-transitory computer-readable storage medium of claim 15 , the one or more processors further configured to in response to receiving the message, retrieve the data record from the database.
17. The non-transitory computer-readable storage medium of claim 15 , wherein
the data record is encrypted; and
the one or more processors further caused to in response to receiving the message, decrypting, by the client device, the encrypted data record using a random symmetric key determined from the encrypted symmetric key.
18. The non-transitory computer-readable storage medium of claim 17 , wherein the random symmetric key is generated using a pseudorandom number generator (PRNG).
19. The non-transitory computer-readable storage medium of claim 15 , the one or more processors further caused to in response to receiving the message, discard an encrypted symmetric key responsive to an elapse of a predetermined window of time.
20. The non-transitory computer-readable storage medium of claim 15 , wherein the request comprises a public key of the client device.