Method and system for obtaining, maintaining and distributing data

• US 20060004588A1
• Filed: 06/30/2004
• Published: 01/05/2006
• Est. Priority Date: 06/30/2004
• Status: Abandoned Application

• Current Assignee: Mohan Ananda
• Original Assignee: Mohan Ananda
• Inventors: Ananda, Mohan
• Application Number:
  US10/883,595
• Publication Number:
  US 20060004588A1
• Time in Patent Office: Days
• US Class Current: 705/67
• CPC Class Codes: G06Q 10/00 Administration; Management
• CPC Class Codes: G06Q 20/3674 involving authentication

Abstract

A method and apparatus for storing and distributing protected information, while complying with regulations regarding privacy rights, are described. The system receives multiple configuration settings from individuals and from a security officer. Those configuration settings are used to determine access level attributes, which allow others to access the data. Furthermore, the system implements workflow configuration, which allows the system to manage the protected data within a framework of operational procedures. One or more authentication and encryption methods are implemented to assure that data is transmitted and stored with the highest level of security.

Claims

1. A method for providing secure storage and distribution of data comprising:

obtaining at least one set of regulation rules;

obtaining at least one set of user rules from a user;

obtaining at least one set of user data associated with said user;

managing said at least one set of user data in accordance with said at least one set of user rules and said at least one set of regulation rules.

2. The method of claim 1 wherein said obtaining said at least one set of regulation rules further comprises obtaining legal rules for protecting privacy right of individuals and organizations.

3. The method of claim 2 wherein said obtaining said legal rules further comprises obtaining rules covering health-related data of individuals.

4. The method of claim 3 wherein said rules covering health-related data further comprise HIPAA rules.

5. The method of claim 2 wherein said obtaining said legal rules further comprises obtaining rules covering financial data of individuals.

6. The method of claim 1 wherein said obtaining said at least one set of user rules further comprises obtaining a set of authorization preferences to allow other individuals access to said at least one set of user data.

7. The method of claim 1 wherein said obtaining said at least one set of user rules further comprises obtaining at least one set of authentication data for said user.

8. The method in claim 7 wherein said obtaining said at least one set of authentication data further comprises obtaining a login name and a password from said user.

9. The method of claim 7 wherein said obtaining said at least one set of authentication data further comprises encrypting said authentication data.

10. The method of claim 7 wherein said obtaining said at least one set of authentication data further comprises deriving an encryption key from said authentication data.

11. The method of claim 10 wherein deriving said encryption key further comprises utilizing said encryption key for encrypting said user data.

12. The method of claim 1 wherein said managing said at least one set of user data further comprises encrypting said at least one set of user data.

13. The method of claim 1 wherein said managing said at least one set of user data further comprises encrypting communication data for network connections.

14. The method of claim 1 wherein said managing said at least one set of user data further comprises defining a plurality of access attributes to access said at least one set of user data.

15. The method of claim 14 wherein said defining a plurality of access attributes further comprises defining said attributes based on said at least one set of regulations rules.

16. The method of claim 14 wherein said defining a plurality of access attributes further comprises defining said attributes based on said at least one set of user rules.

17. The method of claim 1 wherein said managing said at least one set of user data further comprises authenticating a data requester when data requester requests access to said at least on set of user data.

18. The method of claim 17 wherein said managing said at least one set of user data further comprises obtaining at least one access level associated with said data requester.

19. The method of claim 18 wherein said managing said at least one set of user data further comprises associating a print attribute associated with said data requester.

20. The method of claim 1 wherein said managing said at least one set of user data further comprises issuing a notice to said user.

21. The method of claim 20 wherein said issuing said notice further comprises transmitting an electronic message to said user.

22. The method of claim 21 wherein said transmitting said electronic message further comprises detecting the opening of said electronic message.

23. An apparatus for providing secure storage and distribution of data comprising:

means to obtain at least one set of regulation rules;

means to obtain at least one set of user rules from a user;

means to obtain at least one set of user data associated with said user;

means to manage said at least one set of user data in accordance with said at least one set of user rules and said at least one set of regulation rules.

24. The apparatus of claim 23 wherein said means to obtain said at least one set of regulation rules further comprises means to obtain legal rules for protecting privacy right of individuals and organizations.

25. The apparatus of claim 24 wherein said means to obtain said legal rules further comprises means to obtain rules covering health-related data of individuals.

26. The apparatus of claim 24 wherein said means to obtain said legal rules further comprises means to obtain rules covering financial data of individuals.

27. The apparatus of claim 23 wherein said means to obtain said at least one set of user rules further comprises means to obtain a set of authorization preferences to allow other individuals access to said at least one set of user data.

28. The apparatus of claim 23 wherein said means to obtain said at least one set of user rules further comprises means to obtain at least one set of authentication data for said user.

29. The method in claim 28 wherein said means to obtain said at least one set of authentication data further comprises means to obtain and a login name and password from said user.

30. The apparatus of claim 28 wherein said means to obtain said at least one set of authentication data further comprises means to encrypt said authentication data.

31. The apparatus of claim 28 wherein said means to obtain said at least one set of authentication data further comprises means to derive an encryption key from said authentication data.

32. The apparatus of claim 31 wherein data means to derive said encryption key further comprises means to utilize said encryption key for encrypting said user data.

33. The apparatus of claim 23 wherein said means to manage said at least one set of user data further comprises encrypting said at least one set of user data.

34. The apparatus of claim 23 wherein said means to manage said at least one set of user data further comprises means to encrypt communication data for network connections.

35. The apparatus of claim 23 wherein said means to manage said at least one set of user data further comprises means to define a plurality of access attributes for access said at least one set of user data.

36. The apparatus of claim 35 wherein said means to define said plurality of access attributes further comprises means to define said attributes based on said at least one set of regulations rules.

37. The apparatus of claim 35 wherein said means to define said plurality of access attributes further comprises means to define said attributes based on said at least one set of user rules.

38. The apparatus of claim 23 wherein said means to manage said at least one set of user data further comprises means to authenticate a data requester when data requester requests access to said at least on set of user data.

39. The apparatus of claim 38 wherein said means to manage said at least one set of user data further comprises means to obtain at least one access level associated with said data requester.

40. The apparatus of claim 39 wherein said means to manage said at least one set of user data further comprises means to associate a print attribute associated with said data requester.

41. The apparatus of claim 23 wherein said means to manage said at least one set of user data further comprises means to issue a notice to said user.

42. The apparatus of claim 41 wherein said means to issue said notice further comprises means to transmit an electronic message to said user.

43. The apparatus of claim 42 wherein said means to transmit said electronic message further comprises means to detect the opening of said electronic message.