System and method for securely accessing a database from a remote location

• US 20030204752A1
• Filed: 04/15/2003
• Published: 10/30/2003
• Est. Priority Date: 08/13/2001
• Status: Abandoned Application

• Current Assignee: Liberty Peak Ventures, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: Liberty Peak Ventures, LLC (Dominion Harbor Enterprises, LLC)
• Inventors: Garrison, Greg B.
• Application Number:
  US10/413,911
• Publication Number:
  US 20030204752A1
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries

Abstract

A secure client/server system allows remote access to a database system without allowing unauthorized users to access data stored within the database system. A server receives a request for data from a client located at a remote location. The server translates the request for data into an appropriate query or queries. The queries are used by the server to retrieve data from databases associated with the server. If the requested data resides in a plurality of databases that utilize different protocols, the server submits a plurality of queries which are respectively compatible with the databases. Furthermore, if some of the information requested by the request for data is located in a remote database, the server creates a second request for data and transmits the second request for data to a remote server associated with the appropriate database. The remote server translates the second request for data into a second query and retrieves the requested data from the remote server with the second query. The remote server then transmits the data retrieved from the remote database to the server that originally received the request for data from the client. The original server assimilates all of the retrieved data and submits the data in encrypted form to the client.

Claims

1. A system for preventing unauthorized access of database systems, comprising:

a database configured to store data and to retrieve portions of said data in response to queries; and

a server configured to store a plurality of coded expressions and to receive a coded expression transmitted from a client in communication with said server, said server configured to respectively associate each of said stored expressions with a different query, said server configured to correlate said received expression with one of said stored expressions and to submit, to said database and in response to said received expression, the query associated with said one stored expression, said server further configured to transmit, to said client, a portion of said data retrieved by said database in response to said submitted query.

2. The system of claim 1, wherein said query is a structured query language (SQL) query.

3. The system of claim 1, wherein said remote client is configured to select said at least one code word from a list of code words based on a user imput.

4. A system for preventing unauthorized access of database systems, comprising:

a database configured to receive a query, to retrieve data based on said query, and to transmit said retrieved data; and

a first server configured to receive a request for data from a remote client, said request for data including at least one code word, said first server configured to translate said at least one code word into said query, to receive said data transmitted from said database, to encrypt said data transmitted from said database, and to transmit said encrypted data to said client.

5. The system of claim 4, wherein said query is a structured query language (SQL) query.

6. The system of claim 4, wherein said remote client is configured to select said at least one code word from a list of code words based on a user input.

7. A method for preventing unauthorized access of a database systems, comprising the steps of:

establishing communication between a client and a first server;

receiving, at said first server, a first request for data transmitted from said client, said first request for data including at least one code word;

subsequent to said receiving step, translating said at least one code word into a first query;

querying a database with said first query;

retrieving data from said database based on said first query;

encrypting, at said first server, said data retrieved from said database at said first server; and

transmitting said retrieved data from said first server to said client.

8. The method of claim 7, wherein said query is a structured query language (SQL) query.

9. The method of claim 7, further comprising the steps of:

receiving a user input at said client;

selecting, based on said user input, said at least one code word from a list of code words stored at said client; and

transmitting said at least one code word from said client to said first server in response to said selecting step.

10. The method of claim 7, further comprising the step of encrypting said first request for data.

11. The method of claim 7, further comprising the steps of:

creating, at said first server, a second request for data based on said at least one code word, said second request including at least one code word;

transmitting said second request for data to a remote server;

translating, into a second query at said remote server, said at least one code word included in said second request for data;

querying a remote database with said second query;

retrieving remote data from said remote database based on said second query;

encrypting said remote data retrieved from said remote database;

transmitting said remote data from said remote server to said first server, and

transmitting said remote data to from said first server to said client.

12. The method of claim 11, wherein said second query is a structured query language (SQL) query.