US 12,481,771 B2
System and method for operating a secure database
Jonathan Chan, Round Rock, TX (US); and Travis Howe, Lexington, KY (US)
Assigned to The Ethical Identity Company, Round Rock, TX (US)
Appl. No. 18/694,929
Filed by The Ethical Identity Company, Round Rock, TX (US)
PCT Filed Sep. 19, 2022, PCT No. PCT/US2022/044035
§ 371(c)(1), (2) Date Mar. 22, 2024,
PCT Pub. No. WO2023/049080, PCT Pub. Date Mar. 30, 2023.
Claims priority of provisional application 63/248,040, filed on Sep. 24, 2021.
Prior Publication US 2024/0403448 A1, Dec. 5, 2024
Int. Cl. G06F 21/60 (2013.01); H04L 9/00 (2022.01); H04L 9/08 (2006.01)
CPC G06F 21/602 (2013.01) [H04L 9/0869 (2013.01); H04L 9/50 (2022.05)] 14 Claims
OG exemplary drawing
 
1. An active node of a secure database system, comprising:
at least one processor; and
at least one memory that stores computer executable instructions, wherein, when the computer executable instructions are executed by the at least one processor, the at least one processor are configured to:
receive a request to store a private data record;
encrypt the private data record with a first randomly generated data key to result in an encrypted private data record;
encrypt the first randomly generated data key using a first type of encryption and a second randomly generated data key to result in a first encrypted system access key;
encrypt the second randomly generated data key using a second type of encryption to result in at least two second encrypted system access keys, wherein the second type of encryption uses a public key from a randomly selected node of a plurality of nodes that, with the active node, form part of the secure database system, wherein the at least two second encrypted system access keys comprise an encrypted active node system access key and an encrypted audit node system access key, and wherein the encrypted active node system access key and the encrypted audit node system access key contain different portions of the second randomly generated data key;
transmit the encrypted private data record to a plurality of nodes for validation;
add the encrypted private data record to a datastore in the node based on validating that the encrypted private data record can be written to a datastore and receiving messages from the plurality of nodes that the encrypted private data record can be written to the datastore, wherein the datastore mirrors other datastores associated with respective nodes of the plurality of nodes;
store the first encrypted system access key and the at least one second encrypted system access key in an external access key database; and
enable decryption access to the encrypted private data record using the at least one second encrypted system access key based on consensus authorization with the plurality of nodes.