Secure information retrieval service (SIRS)

• US 5,559,888 A
• Filed: 02/15/1994
• Issued: 09/24/1996
• Est. Priority Date: 02/15/1994
• Status: Expired due to Fees

• Current Assignee: Lucent Technologies, Inc. (Nokia Corporation)
• Original Assignee: Lucent Technologies, Inc. (Nokia Corporation)
• Inventors: Jain, Ajay, Gupta, Alok K., Sahni, Paramdeep S.
• Primary Examiner(s): CANGIALOSI, SALVATORE A
• Application Number:
  US08/196,961
• Time in Patent Office: 952 Days
• Field of Search: 380/4, 380/23-25, 380/44, 380/45
• US Class Current: 713/166
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control

Abstract

A secure information retrieval system comprising three levels of confidential access to a database, wherein the first level is stored and transmitted in an unencrypted form, the second level is stored in an encrypted form but transmitted in an unencrypted form, and the third level is stored and transmitted in an encrypted form.

Claims

1. A system for securely storing data and selectively transmitting the stored data over a network comprising:

(a) means for storing data in a plurality of separate data storage devices,

wherein said means for storing data comprises means for encrypting and decrypting data,

and wherein said plurality of separate data storage devices comprises;

(i) a first set of data storage devices each containing data in unencrypted form,

(ii) a second set of data storage devices each containing data in encrypted form, and

(iii) a third set of data storage devices each containing data in encrypted form;

(b) means for accessing the data stored in said plurality of separate data storage devices,

wherein said means for accessing data permits access to the data stored in said first set of data storage devices in response to the proffer of any of a first set of authorization commands,

and wherein said means for accessing data permits access to the data stored in said second set of data storage devices and the data stored in said first set of data storage devices in response to the proffer of any of a second set of authorization commands,

and wherein said means for accessing data permits access to the data stored in said third set of data storage devices and the data stored in said second set of data storage devices and the data stored in said first set of data storage devices in response to the proffer of any of a third set of authorization commands;

(c) means for transmitting over said network the data accessed by said means for accessing the data stored in said plurality of separate data storage devices,

wherein said means for transmitting data produces and transmits a composite data signal comprising the data accessed from said first set of data storage devices, said second set of data storage devices and said third set of data storage devices in response to a particular authorization command taken from the group of authorization commands consisting of said first set of authorization commands, said second set of authorization commands, and said third set of authorization commands,

and wherein said composite data signal comprises;

(i) unencrypted data from said first set of data storage devices,

(ii) data from said second set of data storage devices which is decrypted by said means for encrypting and decrypting data, and

(iii) encrypted data from said third set of data storage devices,

when said particular authorization command is any of said third set of authorization commands; and

(d) means for receiving said composite data signal transmitted by said means for transmitting the data stored in said plurality of separate data storage devices comprising;

(i) means for proffering said particular authorization command to said means for accessing data,

(ii) means for decrypting the encrypted data of said composite data signal, and

(iii) and means for displaying the data of said composite data signal.

2. The system for securely storing data and selectively transmitting the stored data over a network of claim 1 wherein said means for proffering said particular authorization command is a Dual Tone Multiple Frequency telephone keypad.

3. The system for securely storing data and selectively transmitting the stored data over a network of claim 1 wherein said means for displaying the data of said composite data signal comprises said means for decrypting the encrypted data of said composite data signal.

4. The system for securely storing data and selectively transmitting the stored data over a network of claim 1 wherein said means for displaying the data of said composite data signal is a telephone.

5. The system for securely storing data and selectively transmitting the stored data over a network of claim 1 wherein said means for displaying the data of said composite data signal is a facsimile machine.

6. The system for securely storing data and selectively transmitting the stored data over a network of claim 1 wherein said means for displaying the data of said composite data signal is a personal computer.

7. The system for securely storing data and selectively transmitting the stored data over a network of claim 1 wherein said means for displaying the data of said composite data signal comprises a telephone, a facsimile machine and a personal computer.

8. The system for securely storing data and selectively transmitting the stored data over a network of claim 1 wherein said composite data signal comprises audio data.

9. The system for securely storing data and selectively transmitting the stored data over a network of claim 1 wherein said composite data signal comprises image data.

10. The system for securely storing data and selectively transmitting the stored data over a network of claim 1 wherein said composite data signal comprises American Standard Code for Information Interchange (ASCII) data.

11. The system for securely storing data and selectively transmitting the stored data over a network of claim 1 wherein said composite data signal comprises, audio data, image data and American Standard Code for Information Interchange (ASCII) data.

12. The system for securely storing data and selectively transmitting the stored data over a network of claim 1, further comprising means for capturing the telephone number from which said means for receiving proffers a particular authorization command, the date of the proffered authorization command and the time of the proffered authorization command, and wherein at least one of said third set of data storage devices maintains a record of said telephone number, date and time.