Data Security System and Method Adjunct to a Browser, Telecom or Encryption Program

• US 20070150965A1
• Filed: 03/07/2007
• Published: 06/28/2007
• Est. Priority Date: 11/13/2000
• Status: Active Grant

• Current Assignee: DigitalDoors, Inc.
• Original Assignee: DigitalDoors, Inc.
• Inventors: Redlich, Ron, Nemzow, Martin
• Granted Patent: US 7,958,268 B2
• Time in Patent Office: Days
• US Class Current: 726/27
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: G06F 2221/2119 Authenticating web pages, e.g. with suspicious links
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

Data security for processing data or securing browser-input data operates on security sensitive content which is extracted, then either encrypted or stored in remote extract stores, and processed separate from remainder data. Extracted data, in one system, is remotely stored. Other methods attach, append, add or insert an encrypted version of the extract content to the document. The browser system operates with an extract store. Remainder data is sent to the addressee or designated client by the web server. The addressee is permitted to retrieve the extracted data from said extract store only with a security clearance and hence, reconstruct the source input data with the extract data. In other systems, the addressee reconstructs the input by decryption and integration. The browser method extracts data, facilitates the storage, forwards the remainder data to a target. Financial data or credit card scrubber may use pop-up windows for enablement.

Claims

1. A method of securing input data having security sensitive content, represented by one or more security sensitive words, characters, images, data elements or data objects therein, comprising:

extracting said security sensitive content from said input data to obtain a plurality of extract data grouped into different security levels;

encrypting said extracted data for each said security level and one of appending, adding or inserting said encrypted extracted data with remainder input data to form a composite;

responsive to a data request, reconstructing fully or partially said input data from said composite with decryption of said extracted data only in the presence of a respective predetermined security clearance, required for each said security level.

2. A method as claimed in claim 1 including displaying said security sensitive content in a distinguishing manner prior to extracting.

3. A method as claimed in claim 2 including permitting one of user selection and user confirmation of said security sensitive content.

4. A method as claimed in claim 1 including providing multiple levels of encryption and corresponding multiple levels of security clearance.

5. A method as claimed in claim 4 including providing multiple levels of encryption with different encryption keys corresponding to said multiple levels of security clearance.

6. A method as claimed in claim 4 wherein said remainder data is encrypted with said multiple levels of encryption.

7. A method as claimed in claim 6 wherein the step of reconstruction includes decrypting one or both of said extracted data and remainder data with respect to one of more of said multiple levels of encryption based upon one or more of said multiple levels of security clearance.

8. A method of securing input data having security sensitive content, represented by one or more security sensitive words, characters, images, data elements or data objects therein, the method of securing data deployed in a client-server computer system with at least one server computer operatively coupled to at least one client computer over a communications network, said client computer having a decryption routine, the method comprising:

extracting said security sensitive content from said input data to obtain a plurality of extract data grouped into different security levels;

encrypting said extracted data for each said security level and one of appending, adding or inserting said encrypted extracted data with remainder input data to form a composite; and

transmitting said composite to said at least one client computer.

9. A method as claimed in claim 8 wherein said one client computer is one of a plurality of client computers and the method includes, at one of said client computers, displaying said security sensitive content in a distinguishing manner prior to extracting.

10. A method as claimed in claim 9 including, at one of said client computers, permitting one of user selection and user confirmation of said security sensitive content prior to extracting.

11. A method as claimed in claim 8 including providing multiple levels of encryption and corresponding multiple levels of security clearance.

12. A method as claimed in claim 8 including providing multiple levels, types or keys for encryption for said different levels of security clearance.

13. A method as claimed in claim 11 wherein said remainder data is encrypted with said multiple levels of encryption.

14. A method as claimed in claim 8 wherein said extracting said security sensitive content and encrypting said extracted data and transmitting said composite to said at least one client computer occurs at said server computer.

15. A method as claimed in claim 8 wherein said one client computer is one of a plurality of client computers and the method includes said extracting said security sensitive content and encrypting said extracted data occurs at one of said client computers, and transmitting said composite to another client computer occurs via said server computer.

16. A computer readable medium containing programming instructions for a method of securing input data having security sensitive content, represented by one or more security sensitive words, characters, images, data elements or data objects therein, comprising:

extracting said security sensitive content from said input data to obtain a plurality of extract data grouped into different security levels;

encrypting said extracted data for each said security level and one of appending, adding or inserting said encrypted extracted data with remainder input data to form a composite;

responsive to a data request, reconstructing fully or partially said input data from said composite with decryption of said extracted data only in the presence of a respective predetermined security clearance, required for each said security level.

17. A computer readable medium containing programming instructions for the method as claimed in claim 16 including displaying said security sensitive content in a distinguishing manner prior to extracting.

18. A computer readable medium containing programming instructions for the method as claimed in claim 17 including permitting one of user selection and user confirmation of said security sensitive content.

19. A computer readable medium containing programming instructions for the method as claimed in claim 16 including providing multiple levels of encryption and corresponding multiple levels of security clearance.

20. A computer readable medium containing programming instructions for the method as claimed in claim 19 including providing multiple levels of encryption with different encryption keys corresponding to said multiple levels of security clearance.

21. A computer readable medium containing programming instructions for the method as claimed in claim 19 wherein said remainder data is encrypted with said multiple levels of encryption.

22. A computer readable medium containing programming instructions for the method as claimed in claim 21 wherein the step of reconstruction includes decrypting one or both of said extracted data and remainder data with respect to one of more of said multiple levels of encryption based upon one or more of said multiple levels of security clearance.

23. A computer readable medium containing programming instructions for a method of securing input data having security sensitive content, represented by one or more security sensitive words, characters, images, data elements or data objects therein, the method of securing data deployed in a client-server computer system with at least one server computer operatively coupled to at least one client computer over a communications network, said client computer having a decryption routine, the programming instructions comprising:

extracting said security sensitive content from said input data to obtain a plurality of extract data grouped into different security levels;

encrypting said extracted data for each said security level and one of appending, adding or inserting said encrypted extracted data with remainder input data to form a composite; and

transmitting said composite to said at least one client computer.

24. A computer readable medium containing programming instructions for a method as claimed in claim 23 operable wherein said one client computer is one of a plurality of client computers and the programming instructions include, at one of said client computers, displaying said security sensitive content in a distinguishing manner prior to extracting.

25. A computer readable medium containing programming instructions for a method as claimed in claim 24 operable wherein, at one of said client computers, permitting one of user selection and user confirmation of said security sensitive content prior to extracting.

26. A computer readable medium containing programming instructions for a method as claimed in claim 23 including providing multiple levels of encryption and corresponding multiple levels of security clearance.

27. A computer readable medium containing programming instructions for a method as claimed in claim 23 including providing multiple levels, types or keys for encryption for said different levels of security clearance.

28. A computer readable medium containing programming instructions for a method as claimed in claim 26 wherein said remainder data is encrypted with said multiple levels of encryption.

29. A computer readable medium containing programming instructions for a method as claimed in claim 23 wherein said extracting said security sensitive content and encrypting said extracted data and transmitting said composite to said at least one client computer occurs at said server computer.

30. A computer readable medium containing programming instructions for a method as claimed in claim 23 operable wherein said one client computer is one of a plurality of client computers and the programming instructions include extracting said security sensitive content and encrypting said extracted data at one of said client computers, and transmitting said composite to another client computer occurs via said server computer.

31. A method of securing input data passing through a browser, said input data having security sensitive content, represented by one or more security sensitive words, characters, images, data elements or data objects therein, the method deployed in a distributed computer system with a plurality of extract stores, each having a security level and a clearance therefor, comprising:

extracting said security sensitive content from said input data to obtain extracted data for respective security levels;

facilitating the storage of said extracted data in respective ones of said extract stores; and

forwarding any remainder input data to a target destination in said distributed computer system and requiring predetermined security clearances to access said extract stores.

32. A method as claimed in claim 31 including filtering said data while extracting.

33. A method as claimed in claim 32 including defining the filter with a group of security sensitive content and the method includes one of storing said filter or destroying said filter after storing said extracted data.

34. A method as claimed in claim 33 including encrypting one or both of said extracted data and said remainder data.

35. A method as claimed in claim 31 wherein the extracting step operates on credit data, financial data or account data.

36. A computer readable medium containing programming instructions for securing input data passing through a browser, said input data having security sensitive content, represented by one or more security sensitive words, characters, images, data elements or data objects therein, the programming instructions operably deployed in a distributed computer system with a plurality of extract stores, each having a security level and a clearance therefor, comprising:

extracting said security sensitive content from said input data to obtain extracted data for respective security levels;

facilitating the storage of said extracted data in respective ones of said extract stores; and

forwarding any remainder input data to a target destination in said distributed computer system and requiring predetermined security clearances to access said extract stores.

37. A computer readable medium containing programming instructions for securing input data as claimed in claim 36 including filtering said data while extracting.

38. A computer readable medium containing programming instructions for securing input data as claimed in claim 37 including defining the filter with a group of security sensitive content and the programming instructions include one of storing said filter or destroying said filter after storing said extracted data.

39. A computer readable medium containing programming instructions for securing input data as claimed in claim 38 including encrypting one or both of said extracted data and said remainder data.

40. A computer readable medium containing programming instructions for securing input data as claimed in claim 36 wherein the extracting step operates on credit data, financial data or account data.

41. A computer readable medium containing programming instructions for securing data passing through a browser, said data having one or more security sensitive words, characters or icons, used in conjunction with a distributed computer system with a plurality of remote memories respectively designated as corresponding extract stores, each having a respective security level and clearance, comprising:

extracting said security sensitive words, characters or icons from said data to obtain extracted data for respective security levels and remainder data therefrom;

facilitating the storage of said extracted data in respective ones of said extract stores; and

forwarding said remainder data to a targeted destination in said distributed computer system and requiring a respective predetermined security clearance for access to corresponding extract stores.

42. A medium with programming instructions as claimed in claim 41 including filtering said data while extracting.

43. A medium with programming instructions as claimed in claim 42 including defining the filter with a group of security sensitive words, characters or icons and the method includes one of storing said filter or destroying said filter after storing said extracted data.

44. A medium with programming instructions as claimed in claim 43 including encrypting one or both of said extracted data and said remainder data.