Data Filing System Encryption Key Expiry Management

The patent segments the data storage into two distinct components: the encrypted personal data itself and the decryption key. The personal data remains stored in the data filing system in encrypted form, while the decryption key is stored separately and deleted upon expiry. This segmentation allows the data to persist for audit purposes while the key deletion ensures the right to be forgotten is respected.

The patent introduces encryption as an intermediary mechanism between the stored data and access to that data. The encrypted personal data serves as an intermediate state that preserves data integrity and audit trails, while the decryption key acts as a controlled access point that can be selectively removed to enforce the right to be forgotten without affecting the underlying data structure.

The patent segments audit-capable data from access-capable data. Encrypted personal data is retained in the system to maintain complete audit trails, while the decryption key is separately managed and deleted. This allows auditors to access and verify the existence and handling of data without being able to decrypt or access the actual personal information after expiry.

The patent applies different access qualities to different aspects of the data. The encrypted data maintains its structural integrity and metadata for auditing purposes, while the decryption capability is locally removed through key deletion. This creates a state where data can be audited for compliance without being accessible for personal use.

The patent implements automated key management where the system itself generates, assigns, tracks, and deletes encryption keys without requiring manual intervention. The data filing system automatically manages the entire key lifecycle, including generating unique keys for each personal data element, storing them securely, and deleting them upon expiry. This automation reduces operational complexity despite the increased cryptographic complexity.

The patent creates a universal key management framework that handles multiple functions: data encryption, key generation, key storage, expiry tracking, and key deletion. This multi-functional approach consolidates what could be separate complex systems into a unified mechanism that manages all cryptographic operations through a single integrated process.