Re-encrypting data on a hash chain

Patent metadata

Field	Value
Publication number	US-10686586-B2
Application number	US-201715852345-A
Country	US
Kind code	B2
Filing date	Dec 22, 2017
Priority date	Dec 22, 2017
Publication date	Jun 16, 2020
Grant date	Jun 16, 2020

Abstract

Techniques are disclosed for managing encrypted data stored in one or more blocks of a first data structure. One embodiment presented herein includes a computer-implemented method, which includes retrieving the encrypted data from the one or more blocks. The method further includes placing the encrypted data in a container object. The method further includes applying an encryption technique to the container object to generate an encrypted container object and a key. The method further includes generating a second data structure. A first block of the second data structure may include either the encrypted container object or information related to the encrypted container object.

First claim

What is claimed is:

1. A computer-implemented method for managing encrypted data stored in one or more blocks of a first data structure, comprising:
retrieving, by a data retriever, the encrypted data from the one or more blocks;
placing the encrypted data in a container object;
applying, by an encryption engine, an encryption technique to the container object to generate an encrypted container object;
generating a second data structure, wherein the first data structure and the second data structure comprise hash chains, and wherein a first block of the second data structure comprises either;
the encrypted container object; or
information related to the encrypted container object.

2. The computer implemented method of claim 1 , wherein the encrypted data is encrypted with a hash.

3. The computer-implemented method of claim 1 , further comprising:
storing the encrypted container object separately from both the first data structure and the second data structure.

4. The computer-implemented method of claim 3 , wherein the information related to the encrypted container object comprises the hash and a storage location of the encrypted container object.

5. The computer-implemented method of claim 1 , further comprising: either erasing or prohibiting access to the first data structure.

6. The computer-implemented method of claim 1 , wherein the encryption technique is different than an encryption technique used to generate the encrypted data.

7. A computing device for managing data of an application, the computing device comprising:
a memory comprising computer-executable instructions; and
a processor configured to execute the computer-executable instructions and to cause the computing device to:
retrieve, by a data retriever, the encrypted data from the one or more blocks;
place the encrypted data in a container object;
apply, by an encryption engine, an encryption technique to the container object to generate an encrypted container object;
generate a second data structure, wherein the first data structure and the second data structure comprise hash chains, and wherein a first block of the second data structure comprises either:
the encrypted container object; or
information related to the encrypted container object.

8. The computing device of claim 7 , wherein the encrypted data is encrypted with a hash.

9. The computing device of claim 7 , wherein the processor is further configured to cause the computing device to: store the encrypted container object separately from both the first data structure and the second data structure.

10. The computing device of claim 9 , wherein the information related to the encrypted container object comprises the hash and a storage location of the encrypted container object.

11. The computing device of claim 7 , wherein the processor is further configured to cause the computing device to: either erase or prohibit access to the first data structure.

12. The computing device of claim 7 , wherein the encryption technique is different than an encryption technique used to generate the encrypted data.

13. A non-transitory computer-readable medium comprising instructions that when executed by a computing device cause the computing device to perform a method for managing encrypted data stored in one or more blocks of a first data structure, the method comprising:
retrieving, by a data retriever, the encrypted data from the one or more blocks;
placing the encrypted data in a container object;
applying, by an encryption engine, an encryption technique to the container object to generate an encrypted container object;
generating a second data structure, wherein the first data structure and the second data structure comprise hash chains, and wherein a first block of the second data structure comprises either:
the encrypted container object; or
information related to the encrypted container object.

14. The non-transitory computer-readable medium of claim 13 , wherein the encrypted data is encrypted with a hash.

15. The non-transitory computer-readable medium of claim 13 , wherein the method further comprises: storing the encrypted container object separately from both the first data structure and the second data structure.

16. The non-transitory computer-readable medium of claim 15 , wherein the information related to the encrypted container object comprises the hash and a storage location of the encrypted container object.

17. The non-transitory computer-readable medium of claim 13 , wherein the method further comprises: either erasing or prohibiting access to the first data structure.

18. The non-transitory computer-readable medium of claim 13 , wherein the encryption technique is different than an encryption technique used to generate the encrypted data.

Assignees

• Intuit Inc

Inventors

• Pentland Ian R
• Scott Glenn
• Meike Roger
• Gabriel Michael R

Classifications

• H04L9/50

  using hash chains, e.g. blockchains or hash trees · CPC title

• H04L9/14

  using a plurality of keys or algorithms · CPC title

• H04L9/3239 Primary

  involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD · CPC title

• H04L9/06 Primary

  the encryption apparatus using shift registers or memories for block-wise {or stream} coding, e.g. DES systems {or RC4; Hash functions; Pseudorandom sequence generators} · CPC title

• H04L9/0643

  Hash functions, e.g. MD5, SHA, HMAC or f9 MAC · CPC title