Abstract: This patent describes methods which allow the primary owners of sensitive data to retain more access control over the data they share with secondary service providers, even when the secondary service provider electronically stores some form of this information in a service provider maintained database. When these methods are applied by both data owner and service provider the data can only be accessed and used by the service provider during data owner controlled access sessions. This is accomplished through a special set of methods to apply a set of standard encryptions and a special set of methods to manage the associated cryptographic keys. Unencrypted sensitive data need never be permanently stored in a database. Each data owner has their own unique set of cryptographic keys. Critical decryption keys are never permanently stored in service provider databases. Methods are included to allow previously stored data to be recovered even if the data owner loses or forgets the primary password or access key.

Abstract: Techniques are described which allow logical informational elements to be added, changed, erased and queried using only physical data append and read operations. A full change history is also maintained. Data can be saved to any computer data store, including memory, disk, and even a data stream to another program or system. Even media or communications supporting only data append operations can be used. To read information special read techniques are described which allow reading of current information only, information as of a particular point in time, a change history of information over time or information from certain sources only. Associated data quality techniques are described for correcting data and/or analyzing data and/or processing quality metrics. Associated data synchronization techniques are described for propagating logical add/change/delete transactions to other systems in a manner that only require physical data append operations by the receiver.