Eric A Christiansen

US Patent:

20170351871, Dec 7, 2017

Filed:

May 29, 2017

Appl. No.:

15/607537

Inventors:

Eric Alan Christiansen - Pittsburg CA, US

International Classification:

G06F 21/62
G06F 21/60
G06F 21/78
H04L 29/06

Abstract:

This patent describes methods which allow the primary owners of sensitive data to retain more access control over the data they share with secondary service providers, even when the secondary service provider electronically stores some form of this information in a service provider maintained database. When these methods are applied by both data owner and service provider the data can only be accessed and used by the service provider during data owner controlled access sessions. This is accomplished through a special set of methods to apply a set of standard encryptions and a special set of methods to manage the associated cryptographic keys. Unencrypted sensitive data need never be permanently stored in a database. Each data owner has their own unique set of cryptographic keys. Critical decryption keys are never permanently stored in service provider databases. Methods are included to allow previously stored data to be recovered even if the data owner loses or forgets the primary password or access key. Service provider host and database administrators, or hackers who have gained such access, are more effectively blocked from accessing the sensitive data. There is no reliance on obfuscation techniques. Many, many cryptographic keys, not just one, would have to be cryptographically compromised in order to access many records. These methods make massive unauthorized extraction of sensitive data by hackers far more difficult while still supporting effective data sharing suitable for many applications.

US Patent:

20150006485, Jan 1, 2015

Filed:

Jun 26, 2013

Appl. No.:

13/928225

Inventors:

Eric Alan Christiansen - Pittsburg CA, US

International Classification:

G06F 17/30

US Classification:

707625

Abstract:

Techniques are described which allow logical informational elements to be added, changed, erased and queried using only physical data append and read operations. A full change history is also maintained. Data can be saved to any computer data store, including memory, disk, and even a data stream to another program or system. Even media or communications supporting only data append operations can be used. To read information special read techniques are described which allow reading of current information only, information as of a particular point in time, a change history of information over time or information from certain sources only. Associated data quality techniques are described for correcting data and/or analyzing data and/or processing quality metrics. Associated data synchronization techniques are described for propagating logical add/change/delete transactions to other systems in a manner that only require physical data append operations by the receiver.