Patent ID: 9436849
Filing Date: 2016-09-06
CPC Classification: G06F

Claim Text:
1. A Trust-No-One system for sharing encrypted information among users securely and yet efficiently, wherein encryption keys are encrypted by using randomly generated keys when in storage, and users are kept out of possession of encryption keys in decrypted forms when in use, comprising: a processor that generates a Record, a Recordset, and an Entity, wherein the Entity is coupled with the Record via the Recordset; a first memory for storing an encrypted Entity Key in the Entity, storing an encrypted Record Key in the Record, and storing the RecordSet that couples the Entity and the Record; a second memory for executing decryption, wherein a secret is used to decrypt the encrypted Entity Key, the decrypted Entity Key is further used to decrypt the encrypted RecordSet Key, the decrypted RecordSet Key is further used to decrypt the encrypted Record Key, and the decrypted Record Key is further used to decrypt data encrypted in the Record; and a memory storing instructions configured to be executed by the processor to implement an encrypted record and encryption keys wrapping method, wherein the processor further receives a request of access to the Record from the Entity, determines a permission to access the Record based on decrypting the Record Key associated with the Record using the RecordSet Key and the Entity Key associated with the Entity in the second memory, and allowing the permission to access the data when the decrypting of the Record Key is successful.