Data management system and method

• US 7,370,366 B2
• Filed: 11/16/2001
• Issued: 05/06/2008
• Est. Priority Date: 11/16/2001
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Perez, Ronald, Tresser, Charles P., Shub, Michael I., Lacan, Francis M.
• Primary Examiner(s): HOFFMAN, BRANDON S
• Assistant Examiner(s): HOFFMAN, BRANDON S
• Application Number:
  US09/988,320
• Publication Number:
  US 20030097583A1
• Time in Patent Office: 2,363 Days
• Field of Search: 713/182, 713/189, 726/6, 726/28
• US Class Current: 726/28
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes

Abstract

A data management system and method are provided. Specifically, the present invention includes a system for controlling access to data and ensuring that the confidentiality of the data is maintained. In addition, the present invention provides a system for updating data so that confidential data, which has become non-confidential, can be identified and exposed.

Claims

1. A method for managing data, comprising:

receiving operational risk data at randomly generated time intervals in a secured manner from an authorized provider;

identifying details in the received data as one of secret, temporarily secret, possibly secrete and not secret, wherein secret, temporarily secret and possibly secret comprise confidential details and concealing confidential details in the received data from a requester while allowing a composite analysis to be performed by the requester that is based on the confidential details;

storing the received data; and

updating the stored data by identifying and exposing any confidential details that have become non-confidential details in the stored data.

2. The method of claim 1, further comprising:

decrypting the received data, prior to the identifying step;

verifying an accuracy of the received data;

approving a system for analyzing the stored data; and

protecting encryption keys.

3. The method of claim 1, further comprising analyzing the stored data with a data analysis system.

4. The method of claim 3, further comprising approving the data analysis system based upon approval by full rights members.