A secure database management system for confidential records where a transmitted packet of data has a indentifier encrypted first code and a data request encrypted with a second code

摘要

A system 100 for managing sensitive data is described. The system prevents a system administrator from accessing sensitive data by storing data and identifier information on different computer systems. Each query is encrypted using two codes, the first code readable only by an identifier database 128 and a second code readable only by a data access database 152. By routing the data path from a source terminal 104 to the identifier database 128 which substitutes an internal ID, then to the data access database 152 and back to the source terminal 104, data security is significantly improved.