Universal secure registry

• US 7,237,117 B2
• Filed: 03/16/2001
• Issued: 06/26/2007
• Est. Priority Date: 03/16/2001
• Status: Expired due to Term

• Current Assignee: Universal Secure Registry LLC
• Original Assignee: Kenneth P. Weiss
• Inventors: Weiss, Kenneth P.
• Primary Examiner(s): Vu; Kim
• Assistant Examiner(s): Dada; Beemnet W
• Application Number:
  US09/810,703
• Publication Number:
  US 20020178364A1
• Time in Patent Office: 2,293 Days
• Field of Search: 713/182, 713200-202, 707/1, 707/2, 707/9, 707/10, 707/3, 705/2, 705/3, 705/77, 705/78, 705/79, 709/9, 726/2, 726/4, 726/5, 726/17, 726/18, 726/21
• US Class Current: 713/182
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06Q 20/204 comprising interface for record bearing medium or carrier for electronic funds transfer or payment credit
• CPC Class Codes: G06Q 20/34 using cards, e.g. integrated circuit [IC] cards or magnetic cards
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/383 Anonymous user system
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 20/409 Device specific authentication in transaction processing
• CPC Class Codes: G06Q 2220/00 Business processing using cryptography
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: Y10S 707/99931 Database or file accessing
• CPC Class Codes: Y10S 707/99933 Query processing, i.e. searching
• CPC Class Codes: Y10S 707/99939 Privileged access

Abstract

A secure registry system and method for the use thereof are provided which permits secure access to a database containing selected data on a plurality of entities, at least portions of which database has restricted access. Mechanisms are provided for controlling access to restricted access portions of the database are provided, such access being determined by at least one of the identity of the requesting entity and the entity'"'"'s status. A multicharacter public code may be provided which the system can map to provide permit delivery of items, complete telephone calls and perform other functions for entities. The system may also be utilized to locate an individual based on limited biological data. Organizations utilizing the system may have custom software facilitating their access and use of the system.

Claims

1. A secure registry system including:

a database containing selected data on each of a plurality of entities, a code being stored with at least selected portions of said data for at least selected said entities restricting access to said selected portions to entities defined by each said code;

a processor coupled to the database;

an identity mechanism which permits each entity to securely identify itself to the system;

an input mechanism which determines if an identified entity is authorized to enter data into the database, and permits an authorized entity to enter data into the database;

an access mechanism which permits access requests to be made to said database, each such request including an indication of data requested and at least one of a coded indication of an entity requesting the access and the status of such entity;

an entitlement mechanism, including at least in part said identity mechanism, which determines from at least one of provided coded indication of entity and coded indication of entity status whether an entity is entitled to access the requested data, the mechanism granting access to the requested data if an entity is entitled and denying access if an entity is not entitled; and

a restriction mechanism which permits entities to identify portions of the data relating to them for which there is to be restricted access and to store an appropriate code with each such portion, said restriction mechanism including a change mechanism for permitting an entity identified by said identity mechanism to change entities to whom access is granted for at least selected portions of the data for an entity.

2. A system as claimed in claim 1 wherein each entity has a code regimen by which it can be identified by said identity mechanism and a distress code regimen which each entity may employ when making at least one of entries and changes in the database to indicate that such is being done under duress;

and

a protection mechanism operative in response to receipt of a distress code regimen for initiating appropriate action for the protection of each entity.

3. A system as claimed in claim 1 wherein said entitlement mechanism releases selected portions of data for entities to at least selected classes of data requesters based only on the coded status of such entity.

4. A system as claimed in claim 3 wherein at least selected data requesting entities have a mechanism included in their processors which automatically adds their status code to each data request sent by an entity to the system.

5. A system as claimed in claim 3 wherein at least selected data requesting entities have a mechanism included in their processors which provides a format for requested data;

and

wherein said system includes a mechanism which accumulates data required to respond to a request in said format and responds to the request with the collected data presented in said format.

6. A system as claimed in claim 1 wherein said coded indication and coded status for an entity are selectively merged into a single coded input to the system for an access requesting entity, the system including a mechanism for determining the coded status and coded indication from the single coded input.

7. A system as claimed in claim 1 wherein an entity requesting data has a mechanism included in their processor which automatically includes with at least selected data requests a coded status indication and a form into which requested information is to be provided;

and

wherein said entitlement mechanism provides information from the database to which an entity is entitled in the form provided by an entity.

8. A system as claimed in claim 1 wherein relevant data is stored in additional databases outside said system;

said system including a retrieval mechanism which, if an entity is entitled to receive such data, retrieves relevant data from a said additional database and provides it to an entity requesting the data in a manner transparent to an entity.

9. A method for providing a secure registry system including a database containing selected data on each of a plurality of entities, a code being stored with at least selected portions of said data for at least selected said entities restricting access to said selected portions to entities defined by each said code, the method comprising;

permitting each entity to securely identify itself,

determining if an identified entity is authorized to enter data into the database, and permitting an authorized entity to enter data into the database;

permitting access requests to be made to said database, each such request including an indication of data requested and at least one of a coded indication of an entity requesting the access and the status of such entity;

determining from at least one of provided coded indication of entity and coded indication of entity status whether an entity is entitled to access the requested data, and granting access to the requested data if an entity is entitled and access being denied if an entity is not entitled; and

permitting entities to identify portions of the data relating to them for which there is to be restricted access and to store an appropriate code with each such portion, said act of permitting further comprising permitting an entity to change entities to whom access is granted for at least selected portions of the data for an entity.

10. The method as claimed in claim 9 wherein each entity has a code regimen by which it can be identified and a distress code regimen which each entity may employ when making at least one of entries and changes in the database to indicate that such is being done under duress further comprising in response to receipt of a distress code regimen, initiating appropriate action for the protection of each entity.

11. The method as claimed in claim 9, further comprising releasing selected portions of data for entities to at least selected classes of data requesters based only on the coded status of such entity.

12. The method as claimed in claim 9 wherein relevant data is also stored in additional databases outside said system, the method further comprising:

if an entity is entitled to receive such data, retrieving relevant data from a said additional database and providing it to the entity requesting the data in a manner transparent to an entity.