Patent ID: 11899812
Assignee: JJD SOFTWARE LLC
Field: Digital communication (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 0:
1. A data security system, comprising:
a hardware memory; and a hardware processor coupled to the hardware memory and configured to provide a data security service that decrypts encrypted private data for a third party domain, including:
a middle security layer configured to receive queries from a remote application controlled by the third party domain, wherein in response to a query involving specified encrypted private data, the middle security layer processes the query, obtains decrypted private data and returns a token to the remote application;
a root security layer configured to receive a data decryption request from the middle security layer, perform data decryption to obtain the specified encrypted private data using a compound key, and return decrypted private data to the middle security layer;
a security infrastructure for pre-establishing an encrypted channel between the remote application and the root security layer; and
wherein the data decryption performed by the root security layer includes:
receiving a middleware key via the encrypted channel from the application;
hashing the middleware key to create a middleware key hash;
decrypting an encrypted root key stored in the root security layer with the middleware key hash to generate a root key; and
creating a compound key from the middleware key and root key to perform the data decryption.