Query server system security and privacy access profiles

• US 20050108526A1
• Filed: 08/11/2004
• Published: 05/19/2005
• Est. Priority Date: 08/11/2003
• Status: Abandoned Application

• Current Assignee: WhamTech, Inc.
• Original Assignee: WhamTech, Inc.
• Inventors: Robertson, Gavin
• Application Number:
  US10/915,999
• Publication Number:
  US 20050108526A1
• Time in Patent Office: Days
• US Class Current: 713/166
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/105 Multiple levels of security

Abstract

A method of controlling graduated access to data resources within an organization may be performed by assigning security access privileges to organizational roles. When a query is received, the organizational role is associated with the query source. The security access privileges are used to determine the available query data results for the organizational role. Results are provided to the query source based on the security access privileges.

Claims

1. A method of controlling graduated access to data resources within an organization comprising the steps of:

assigning security access privileges to organizational roles;

receiving a query

determining an organizational role associated with a query source;

determining the availability of query data results in accordance with the security access privileges for the organizational role;

providing results to said query source based on said security access privileges.

2. The method of claim 1, wherein said organization is a governmental organization.

3. The method of claim 1, wherein said organization is a commercial organization.

4. The method of claim 1 wherein said security access privileges include unclassified, classified secret and top-secret levels.

5. The method of claim 1 wherein said security access privileges comprise a query organization access profile.

6. The method of claim 1, wherein said security access privileges comprise a user access profile.

7. The method of claim 1, wherein said security access privileges comprise an application access profile.

8. The method of claim 1, wherein said security access privileges comprise a content access profile.

9. The method of claim 1, wherein said security access privileges comprise a data source access profile.

10. The method of claim 1, wherein said security access privilege comprise a data source organization access profile.

11. A system for enforcing graduated security access control to data in a data source within an organization comprising:

a query source, wherein said query source is assigned a role;

a security access profile associated with said role;

a query server connected to said query source; and

a data source connected to said query source;

wherein said query server provides query results to said query source according to restrictions based on said security access profile.

12. The system of claim 11, wherein said organization is a governmental organization.

13. The system of claim 11, wherein said organization is a commercial organization.

14. The system of claim 11 wherein said security access privileges include unclassified, classified secret and top-secret levels.

15. The system of claim 11 wherein said security access privileges comprise a query organization access profile.

16. The system of claim 11, wherein said security access privileges comprise a user access profile.

17. The system of claim 11, wherein said security access privileges comprise an application access profile.

18. The system of claim 11, wherein said security access privileges comprise a content access profile.

19. The system of claim 11, wherein said security access privileges comprise a data source access profile.

20. The system of claim 11, wherein said security access privilege comprise a data source organization access profile.