Electronic sealed envelope

• US 6,173,282 B1
• Filed: 12/29/1997
• Issued: 01/09/2001
• Est. Priority Date: 11/27/1997
• Status: Expired due to Term

• Current Assignee: RPX Clearinghouse LLC (RPX Corporation)
• Original Assignee: Nortel Networks Limited (Nortel Networks Corporation)
• Inventors: Kanabar, Yashvant, Dean, Robert John, Unitt, Brian Michael, McCaughan, Daniel Vincent
• Primary Examiner(s): Alam, Hosain T.
• Assistant Examiner(s): ALAM, SHAHID AL
• Application Number:
  US08/998,918
• Time in Patent Office: 1,107 Days
• Field of Search: 707/9, 707/100, 707/103, 707/10, 707/3, 705/3, 705/67, 713/200, 713/201, 713/202, 709/220, 709/229, 712/28, 382/115
• US Class Current: 705/67
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 21/77 in smart cards
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/35765 Access rights to memory zones
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: Y10S 707/922 Communications
• CPC Class Codes: Y10S 707/959 Network
• CPC Class Codes: Y10S 707/99939 Privileged access

Abstract

Restricted data is stored on a smart card having a memory and a processor. Preferably the restricted data is stored in groups. The smart card may store a record of users authorized to access certain groups of restricted data. An owner of the smart card must authorize registration of new users by entering their password, the new users are then given their own passwords in order to retrieve certain groups of restricted data. When a registered user uses their password to retrieve restricted data the smart card irretrievably modifies a codeword in a codeword section of the restricted data group, each codeword corresponding to an authorized user. The owner of the smart card is then able to determine if the restricted data has been accessed by checking for modified codewords.

Claims

1. Apparatus for retrieving restricted data, comprising;

a data storage system containing said restricted data and a pre-determined code word,

wherein said code word is stored on a memory element which is modifiable only once;

an access system arranged to download said restricted data and modify said code word;

wherein said code word is not further modifiable, and wherein said modified code word indicates said restricted data has been accessed.

2. Apparatus according to claim 1, wherein a said accessing system provides a password to said data storage system in order to retrieve said restricted data.

3. Apparatus according to claim 1, wherein said data storage system stores said restricted data in groups.

4. Apparatus according to claim 1, wherein said data storage system stores said restricted data in groups, and a said accessing system provides a group specific password to said data storage system in order to retrieve data from a specific said group.

5. Apparatus according to claim 1, wherein there is a plurality of codewords, each of said codewords corresponding to a respective one of said one or more data accessing system.

6. Apparatus according to claim 1, wherein said data storage system contains a registration record comprising a list of said accessing systems authorized to access said restricted data.

7. Apparatus according to claim 1, wherein said stored data contains at least one codeword, each said codeword corresponding to a respective said accessing system and a said codeword is irrevocably modified to indicate accessing of said restricted data by said accessing system.

8. Apparatus according to claim 1, wherein access to said restricted data is limited after said irrevocable modification.

9. Apparatus according to claim 1, wherein said data storage system comprises one or more smart cards, each having a memory.

10. Apparatus according to claim 1, wherein said accessing systems comprise a card access device and a processor connected to a communications network through which communication to a remote data storage system can take place.

11. Apparatus according to claim 1, wherein said accessing systems comprise a card access device and a processor connected to a PBX through which communication to a remote data storage system can take place.

12. Apparatus according to claim 1, wherein said data storage system comprises a One Time Programmable Read Only Memory.

13. Apparatus according to claim 1, wherein said restricted data is stored in one or more data files.

14. A method of retrieving restricted data from a data storage system containing said data and a pre-determined code word, said code word being stored on a memory element which is modifiable only once, the method comprising:

accessing said restricted data and modifying said code word such that said code word is not further modifiable, wherein said modified code word indicates said restricted data has been accessed.

15. A method according to claim 14, comprising the step of providing a password to said data storage system.

16. A method according to claim 14, wherein said restricted data is stored in groups.

17. A method according to claim 14, wherein said restricted data is stored in groups, comprising the step of providing a group specific password to said data storage system in order to retrieve data from a specific said group.

18. A method according to claim 14, wherein said stored data contains more than one codeword, each said codeword corresponding to a respective said user.

19. A method according to claim 14, comprising the step of creating and maintaining a registration record comprising a list of said users authorized to access said restricted data.

20. A method according to claim 14, wherein said stored data contains at least one codeword, each said codeword corresponding to a respective said user and a said codeword is irrevocably modified to indicate accessing of restricted data by said user.

21. A method according to claim 14, comprising the step of limiting access to said restricted data after said irrevocable modification.

22. A method according to claim 14, wherein said irretrievable modification comprises storing data describing accessing of said restricted data by a said user.

23. A method according to claim 14, wherein said irrevocable modification comprises storing data describing a time of said accessing of said restricted data by a said user.

24. A method according to claim 14, wherein said restricted data is stored in one or more data files.