System for controlling access to stored data

• US 20050005128A1
• Filed: 10/30/2003
• Published: 01/06/2005
• Est. Priority Date: 06/26/2003
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Woodcock, Gillian Laura, Wright, Steven, Lambert, Howard Shelton
• Application Number:
  US10/698,174
• Publication Number:
  US 20050005128A1
• Time in Patent Office: Days
• US Class Current: 713/182
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards

Abstract

A data processing system for controlling access of at least one user to stored data is provided. The system comprises means, responsive to a request from the user to access a set of the stored data, for authenticating the user. The system also comprises means, responsive to successful authentication, for decrypting an encrypted data structure associated with the user. The data structure comprises data associated with the set (e.g. location of the set). The system also comprises means, responsive to successful decryption, for accessing the set.

Claims

1. A data processing system for controlling access of at least one user to stored data comprising:

means, responsive to a request from the user to access a set of the stored data, for authenticating the user;

means, responsive to successful authentication, for decrypting an encrypted data structure associated with the user, wherein the data structure comprises data associated with the set; and

means, responsive to successful decryption, for accessing the set.

2. A data processing system as claimed in claim 1, wherein the data associated with the set comprises data associated with the location of the set.

3. A data processing system as claimed in claim 1, wherein the set is encrypted and the data associated with the set comprises data associated with decryption of the set.

4. A data processing system as claimed in claim 1, wherein the set comprises all of the stored data.

5. A data processing system as claimed in claim 1, wherein the set comprises a portion of the stored data.

6. A data processing system as claimed in claim 1, wherein the user request is initiated by presentation of a token by the user.

7. A data processing system as claimed in claim 6, wherein the token comprises means associated with the identity of the user.

8. A data processing system as claimed in claim 7, wherein the means associated with the identity of the user is derived from one or more biometric characteristics associated with the user.

9. A data processing system as claimed in claim 6, wherein the token comprises the means for decrypting.

10. A data processing system as claimed in claim 1, wherein the stored data is capable of access by more than one user, the system further comprises means for accessing a data structure comprising data associated with each user of the more than one users.

11. A method for controlling access of at least one user to stored data via a data processing system comprising the steps of:

in response to a request from the user to access a set of the stored data, authenticating the user;

in response to successful authentication, decrypting an encrypted data structure associated with the user, wherein the data structure comprises data associated with the set; and

in response to successful decryption, accessing the set.

12. A computer program comprising program code means adapted to perform the steps of claim 11, when said program is run on a computer.