TECHNIQUES FOR DATABASE STRUCTURE AND MANAGEMENT

• US 20080189250A1
• Filed: 09/12/2007
• Published: 08/07/2008
• Est. Priority Date: 09/11/2006
• Status: Active Grant

• Current Assignee: Interdigital Technology Corporation (InterDigital, Inc.)
• Original Assignee: Interdigital Technology Corporation (InterDigital, Inc.)
• Inventors: Cha, Inhyok, Shah, Yogendra C., Purkayastha, Debashish, Herschaft, Richard D.
• Granted Patent: US 8,201,216 B2
• Time in Patent Office: Days
• US Class Current: 707/3
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 2221/2145 Inheriting rights or properties, e.g., propagation of permissions or restrictions within a hierarchy
• CPC Class Codes: H04L 2209/127 Trusted platform modules [TPM]
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/00 Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols

Abstract

An embodiment is related to a database system for protecting data privacy and efficient organization of data. An enhanced database system comprises a DBMS, a data classifier, a database of applications and a rules and policy unit. The DBMS includes a query processor for processing a query from a user. The rules and policy unit outputs a pointer to a node within the data classification tree based on several criteria. In accordance with another embodiment, a DBMS residing within a communication network organizes data related to the ID of mobile users. In accordance with another embodiment, an enhanced database system comprises a DRM user agent and a DBMS. The DRM user agent receives a CO protected by DRM. The DBMS stores the CO and controls access to the CO based on restrictions specified in an RO associated with the CO.

Claims

1. A secure database system for use in a wireless communication system, the database comprising:

a database management system (DBMS) for processing data queries;

a rules unit for receiving data queries from the DBMS, and for providing the queried data only if the data query satisfies at least one predefined rule; and

a tree based database coupled to said rules unit for storing data in a hierarchical structure, and providing said stored data to said rules unit upon request.

2. The secure database system of claim 1 wherein the rules unit comprises:

a policy unit for outputting a pointer to a node in the tree based database based on predetermined access rules and data classification and application description of the query.

3. The secure database system of claim 2 wherein the rules unit further comprises:

a list of applications allowed to access the policy unit;

an ontology/KBS unit for importing ontology descriptions of data; and

a data classification unit for outputting a data classification for a data query.

4. The secure database system of claim 3 wherein the data query includes an application making the query, and the rules unit rejects query if the application is not on the list of applications allowed to access the policy unit.

5. The secure database system of claim 1 wherein the tree based database includes different branches for different taxonomies, and each branch has unique access policies.

6. The secure database system of claim 1 wherein the data query is exchanged between the DBMS and the rules unit using a security description language.

7. The secure database system of claim 2 wherein access to the policy unit is secured by a trusted processing module.

8. The secure database system of claim 1 wherein the DBMS is located in the rules unit.

9. A database system for securely managing identity (ID) related information for use in access control for a wireless communication network, the database system comprising:

an ID management and service access controller system (IDMS/ACS) for managing access to the wireless communication network based on information contained in a user ID profile (UID-PR);

a UID-PR exporter;

a UID-PR importer; and

an ID-database management system (ID-DBMS) for providing an interface between the IDMS/ACS and the UID-PR importer and UID-PR-exporter.

10. The database system of claim 9 wherein the UID-PR includes at least one parameter selected from the following list of parameters:

user associated device (UAD);

user associated service provider (UASP);

user associated service (UAS);

user associated service context (UASC);

user associated operator'"'"' (UAO);

user associated ID service provider'"'"' (UAIDSP);

user-associated operator billing and charging service (UAO-BCS);

user ID information disclosure type and rule'"'"' (UIIDTR);

user-associated access control mechanism information'"'"' (UAACMI);

UID-PR; and

user-ID entity trust mechanism information'"'"' (UID-ETMI),

11. The database system of claim 9 wherein the ID-DBMS comprises:

a rules/policy unit for receiving UID-PR queries from the IDMS/ACS, and for providing the queried UID-PRs only if the query satisfies predefined rules and classification requirements.

12. The database system of claim 10 wherein the UASC includes information related to a specific location or time when a particular service can be provided to a particular user.

13. The database system of claim 10 wherein user-associated UAO-BCS is used by the network for billing and charging, and UAACMI is used by the network for access control.

14. The database system of claim 10 wherein the UID-ETMI defines information on mechanisms for trust-relationship establishment and management.

15. A database system for storing and protecting digital rights management (DRM) content, the system comprising:

an application for using and requesting DRM protected content;

at least one DRM user agent for storing DRM agent specific protected DRM data;

a database management system (DBMS) for receiving requests for DRM protected content from the application, and retrieving the requested DRM content from the at least one DRM user agent.

16. The database system of claim 15 wherein the DBMS includes a rules/policy unit for receiving the requests for DRM protected content and for providing the requested DRM content only if the request satisfied predefined rules and classification requirements.

17. The database system of claim 15 wherein the database system is located in a wireless/transmit receive unit (WTRU).

18. The database system of claim 15 wherein the at least one DRM user agent includes a content object (CO) and a rights object (RO).

19. The database system of claim 18 wherein the DBMS uses the RO to determine whether the application is allowed to access the CO.

20. The database system of claim 15 wherein the DBMS is configured for decrypting the requested DRM protected content after retrieving it.

21. A database system for storing and protecting digital rights management (DRM) content using common trans-ciphering, the system comprising:

at least one DRM system;

for using and providing DRM encrypted content objects (COs);

a common trans-ciphering (CTC) unit for re-encrypting different content objects originally encrypted for different DRM systems with different encryption/decryption algorithms and for storing them in a protected memory.

a database management system (DBMS) for receiving COs from the least one DRM system and providing them to the CTC unit only if the COs satisfy predefined rules and classification requirements.

22. The database system of claim 21 wherein the CTC unit further comprises:

a crypto unit optimized for performing content trans-ciphering; and

a TPM unit for protecting the stored COs.

23. The database system of claim 21 wherein the DBMS further comprises:

a CO intake and control unit; and

a DBMS sub-system for comparing COs to predefined rules and classification requirements.

24. The database system of claim 21 wherein the database system is located in a wireless transmit/receive unit (WTRU).

25. The database system of claim 21 wherein the protected memory is a TPM blob.