Patent ID: 8667287
Filing Date: 2014-03-04
Classification: G06F

Abstract:
1. A method for processing requests for information at a security device, said security device having a controller device and an associated memory storage device for storing user data, the controller performing processing of a received request by: generating a message comprising an indication of the information requested about the user data, the message being generated so as to permit verification, using secret data, that the message was generated by the controller; sending the message to a terminal device for communication via a network to a publication entity for publication of the message in the network; receiving from the terminal device a cryptographic construction, issued by the publication entity, encoding the message published by the publication entity; checking validity of the cryptographic construction for said message generated by the controller; and supplying the information requested about the user data to the terminal device in dependence on said cryptographic construction, wherein said generating a message further comprises: encrypting said indication of the information requested about the user data to produce a ciphertext which is decryptable using a secret user key, the encrypting of said indication being in accordance with a key-anonymous encryption system.