Method and system for fully encrypted repository

Patent metadata

Field	Value
Publication number	US-12443749-B2
Application number	US-202418651127-A
Country	US
Kind code	B2
Filing date	Apr 30, 2024
Priority date	Jun 16, 2011
Publication date	Oct 14, 2025
Grant date	Oct 14, 2025

Abstract

According to an embodiment of the present invention, a method for using information in conjunction with a data repository includes encrypting data associated with the information with an encryption key, sending at least the encrypted data to the data repository, and possibly deleting the information. The method also includes receiving a request for the information from a remote device, and sending a request for the encrypted data to the data repository. The method further includes receiving the encrypted data from the data repository, decrypting the encrypted data using the encryption key, and sending the information to the remote device.

First claim

What is claimed is:

1. A method of securely authorizing an electronic transaction by an identity protection system, the method comprising:
receiving a proposed transaction involving a user;
accessing a list of devices associated with the user, the list identifying a plurality of devices that have been preselected by the user, wherein the plurality of devices includes a new device, the new device having been approved by two pre-existing devices in the plurality of devices or approved in advance by a preset time interval by one pre-existing device in the plurality of devices;
causing presentation of (1) the proposed transaction and (2) an option to approve or disapprove the proposed transaction to each respective person using each of the plurality of devices, wherein responses to the presented option, if provided, are transmitted to the identity protection system by the plurality of devices;
receiving the responses from at least a subset of the plurality of devices; and
causing completion of the proposed transaction after a predetermined amount of time if all of the received responses approve the proposed transaction,
wherein the predetermined amount of time is dynamically determined at a time of receiving the proposed transaction,
wherein the predetermined amount of time is based on a security level of the proposed transaction, and
wherein the security level of the proposed transaction is set to a highest security level associated with the plurality of devices.

2. The method of claim 1 , wherein the subset of the plurality of devices includes at least one of a mobile device, a desktop computer or a tablet computer.

3. The method of claim 1 , wherein the predetermined amount of time is dynamically determined based on a value of the proposed transaction.

4. The method of claim 1 , further comprising:
causing a cancelation of the proposed transaction if a response is not received from at least one of the devices identified in the list.

5. The method of claim 1 , further comprising:
causing a cancelation of the proposed transaction if at least one of the received responses indicates that the respective person of the subset of the plurality of devices that transmitted the response disapproved the proposed transaction.

6. The method of claim 1 , wherein the plurality of devices identified in the list includes at least one device associated with the user.

7. The method of claim 1 , wherein the plurality of devices identified in the list includes at least one device associated with a second user.

8. The method of claim 1 , wherein the proposed transaction is an address change transaction.

9. The method of claim 1 , wherein an authorized transaction value limit of the proposed transaction is based on at least one of password unlocking access, a secure work location or a mobility associated with at least one of the plurality of devices.

10. The method of claim 1 , wherein the dynamic determination of the predetermined amount of time at the time of receiving the proposed transaction uses a selection of one of a number of predetermined amounts of time, the selection being based on an attribute of the proposed transaction.

11. An identity protection system for authorizing a transaction, comprising:
one or more processors configured to:
receive a proposed transaction involving a user;
access a list of devices associated with the user, the list identifying a plurality of devices that have been preselected by the user, wherein the plurality of devices includes a new device, the new device having been approved by two pre-existing devices in the plurality of devices or approved in advance by a preset time interval by one pre-existing device in the plurality of devices;
cause presentation of (1) the proposed transaction and (2) an option to approve or disapprove the proposed transaction to each respective person using each of the plurality of devices, wherein responses to the presented option, if provided, are transmitted to the identity protection system by the plurality of devices;
receive the responses from at least a subset of the plurality of devices; and
cause completion of the proposed transaction after a predetermined amount of time if all of the received responses approve the proposed transaction,
wherein the predetermined amount of time is dynamically determined at a time of receiving the proposed transaction,
wherein the predetermined amount of time is based on a security level of the proposed transaction, and
wherein the security level of the proposed transaction is set to a highest security level associated with the plurality of devices.

12. The identity protection system of claim 11 , wherein the subset of the plurality of devices includes at least one of a mobile device, a desktop computer or a tablet computer.

13. The identity protection system of claim 11 , wherein the predetermined amount of time is dynamically determined based on a value of the proposed transaction.

14. The identity protection system of claim 11 , wherein the one or more processors are further configured to cause a cancelation of the proposed transaction if a response is not received from at least one of the devices identified in the list.

15. The identity protection system of claim 11 , wherein the one or more processors are further configured to cause a cancelation of the proposed transaction if at least one of the received responses indicates that the respective person of the subset of the plurality of devices that transmitted the response disapproved the proposed transaction.

16. The identity protection system of claim 11 , wherein the plurality of devices identified in the list includes at least one device associated with the user.

17. The identity protection system of claim 11 , wherein the plurality of devices identified in the list includes at least one device associated with a second user.

18. The identity protection system of claim 11 , wherein the proposed transaction is an address change transaction.

19. The identity protection system of claim 11 , wherein an authorized transaction value limit of the proposed transaction is based on at least one of password unlocking access, a secure work location or a mobility associated with at least one of the plurality of devices.

20. The identity protection system of claim 11 , wherein the dynamic determination of the predetermined amount of time at the time of receiving the proposed transaction uses a selection of one of a number of predetermined amounts of time, the selection being based on an attribute of the proposed transaction.

Assignees

• Neustar Inc

Inventors

• Kirsch Steven Todd

Classifications

• H04L63/061

  for key exchange, e.g. in peer-to-peer networks (cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838) · CPC title

• H04L63/0435

  wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06) · CPC title

• G06Q20/3829

  involving key management · CPC title

• G06Q20/12

  specially adapted for electronic shopping systems · CPC title

• G06Q20/405

  Establishing or using transaction specific rules · CPC title