Cryptographic data storage
The present application concerns a method and a system of storing one or more service data items. To store and share in particular confidential data, the one or more service data items are partitioned into one or more data stores. The one or more data stores are stored. Metadata of the one or more data stores is generated and the metadata is stored in a metadata database.
1. A method of storing a plurality of service data items, wherein
the plurality of service data items are partitioned into a plurality data stores;
encrypting a given one of each of the one or more data stores with a given encryption key of a plurality of encryption keys, the given encryption key to differ from other encryption keys of the plurality of encryption keys used to encrypt other data stores of the plurality of data stores;
the plurality of data stores are stored;
metadata of the plurality of data stores is generated, the metadata including a data item verification fingerprint generated for each of the data stores;
the metadata, including the data item verification fingerprint generated for each of the data stores, is stored in a metadata database; wherein
one or more of the data stores comprise a link to at least one further data store; and wherein the one or more data stores in addition to the link further comprise a first encryption key, the first encryption key included in the plurality of encryption keys and used to encrypt the at least one further data store.
2. The method of claim 1 , wherein an aggregated verification fingerprint is determined from the data item verification fingerprints, and wherein the aggregated verification fingerprint is stored in at least one blockchain.
3. The method of claim 2 , wherein the aggregated verification fingerprint has a bit length, which is less than a bit length of a concatenation of the data item verification fingerprints.
4. The method of claim 1 , wherein the metadata comprises at least one or more quasi-unique identifiers of the plurality of service data items, contained in the associated data store.
5. The method of claim 1 , wherein the metadata database is searchable.
6. The method of claim 1 , wherein the plurality of data stores are encrypted.
7. The method of claim 1 , wherein the plurality of encrypted data stores are stored in a shared storage system.
8. The method of claim 1 , wherein the metadata comprises non-encrypted data.
9. The method of claim 1 , wherein one or more of the data stores comprise EPCIS files.
10. The method of claim 1 , wherein the metadata database may be queried and upon a match between query information of a query and stored metadata, a notification is transmitted to a user, the user associated with the stored metadata.
11. The method of claim 10 , wherein the query comprises one or more of a requestor identifier and a request reason.
12. The method of claim 11 , wherein one or more of the requestor identifier and the request reason are transmitted to the user, the user associated with the stored metadata.
13. The method of claim 11 , wherein the requestor identifier is verifiable using at least one blockchain.
14. A system for storing a plurality of service data items, comprising
an interface for receiving a plurality of service data items;
a data store manager, configured to partition the plurality of service data items into a plurality of data stores and to store the plurality of data stores and to encrypt a given one of each of the plurality of data stores with a given encryption key of a plurality of encryption keys, the given encryption key to differ from other encryption keys of the plurality of encryption keys used to encrypt other data stores of the plurality of data stores;
a metadata handler for generating metadata of the plurality of data stores, the metadata including a data item verification fingerprint generated for each of the data stores; and
a metadata database, configured to receive and store the generated metadata including the data item verification fingerprint generated for each of the data stores;
wherein one or more of the data stores comprise a link to at least one further data store; and
wherein the one or more data stores in addition to the link further comprise a first encryption key, the first encryption key included in the plurality of encryption keys and used to encrypt the at least one further data store.