This U.S. Patent No. 7,362,868 is signed by Madoukh, et al., and dated April 22, 2008 on the following subject:
Hidden link dynamic key manager for use in computer systems with database structure for storage of encrypted data and method for storage and retrieval of encrypted data

Abstract
A computer system having a security domain, at least one client business domain, and a plurality of client terminals utilizes a hidden link dynamic key manager and a database structure that includes encrypted data entities and a security identification attribute for storage of encrypted data. Methods for encrypting data and for storing, decrypting, and retrieving encrypted data operate on the computer system, which also includes an information database and a key database. The key database is isolated from the information database. The hidden link key manager is stored in the security domain and includes a system key manager operable to generate system keys with system key common names and an encryption key manager operable to generate encryption keys having encryption key identifications. The key managers operate on a key server, which is mirrored by a secondary key server. A general security manager also operates on the key server to control access to the security domain. The security information attribute  is stored with a persistent data entity that is associated with the other encrypted data entities by a database schema. The encryption key identification for the encryption key used to encrypt the data entities is encrypted by a system key and then stored as part of the security information attribute. The system key common name hash value is also stored in the security information attribute. The information data entities are stored on the information database, but the encryption key identification, encryption key, system key common name hash value, and system key common name are stored in the key database inside the security domain. The system key itself is stored on a Smart Card reader inside the security domain.

Inventors: Madoukh; Ashraf (Overland Park, KS), Vasic; Ognjen (Lenexa, KS), Ansari; Suhail (Lenexa, KS), Khulusi; Bassam (Overland Park, KS), Hu; Jinhui (Lenexa, KS)
Assignee: Eruces, Inc. (Lenexa, KS)
Appl. No.:  09/693,605
Filed: October 20, 2000