Personal portal and secure information exchange

• US 7,376,652 B2
• Filed: 06/17/2003
• Issued: 05/20/2008
• Est. Priority Date: 06/17/2003
• Status: Expired due to Fees

• Current Assignee: Machine-to-Machine Intelligence Corp.
• Original Assignee: The Hayes-Roth Family Trust
• Inventors: Hayes-Roth, Frederick
• Primary Examiner(s): LEWIS, CHERYL RENEA
• Application Number:
  US10/464,065
• Publication Number:
  US 20040267707A1
• Time in Patent Office: 1,799 Days
• Field of Search: 707 1- 5, 707/100, 707/9, 707/10, 707/104.1, 715/742, 709/203, 709/217, 709/227, 709/225, 726/2, 726/4, 726 27- 30, 713/182, 713/189, 713/190
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database

Abstract

The present invention provides a secure information exchange mechanism that can be seen as a portal or gateway to his or her digital information. The invention is sometimes referred to as an “n-by-m lockbox” because it allows n suppliers to submit information accessible by m accessors. Each lockbox owner specifies and controls who or what can provide what information to the lockbox, who or what can access what information stored therein, and when and how the stored information is accessed. The information may be encrypted and only authorized accessors would be able to decipher it. The lockbox may comprise multiple compartments that segregate information based on pertinent criteria and may incorporate multiple encryption/decryption mechanisms that respectively correspond to each of the multiple compartments. The lockbox owner may associate different encryption keys with different compartments and give these keys to different depositors or instruct depositors to utilize different keys for specific categories of content. The lockbox provides a means for improved organization of the storage of potentially vast amounts of information. Further, the lockbox solves many problems associated with spamming and also advantageously prevents problems associated with various security attacks, such as flooding and denial of service.

Claims

1. A computer-implemented secure information exchange system comprising:

a digital repository, wherein said digital repository is a personal digital repository having a digital lockbox, wherein said digital repository comprises;

means for permitting multiple and different authorized suppliers to only push desired information to the digital repository, in which the multiple and different authorized suppliers are humans or machines, and wherein the desired information is specified by the owner of the digital repository as the information to be received by and stored on the digital repository;

means for storing the desired information on the digital repository once the desired information has been pushed and accepted as the desired information by the digital repository;

means for allowing multiple and different permitted accessors, in which the permitted accessors are humans or machines including the owner of the digital repository, access to the desired information stored on the digital repository; and

a plurality of compartments and a means for specifying which of the plurality of compartments is accessible by which of the multiple and different permitted accessors; and

means for encrypting the desired information.

2. The secure information exchange system according to claim 1, further comprising:

means for preventing undesirable information being stored in the digital repository, wherein the undesired information is specified by the owner of the digital repository as the information to not be received by and not stored on the digital repository.

3. The secure information exchange system according to claim 2, in which the means for preventing undesirable information being stored in the digital repository is a content permission filter.

4. The secure information exchange system according to claim 1, further comprising:

means for preventing undesirable information being supplied to the digital repository.

5. The secure information exchange system according to claim 1, wherein

the digital repository is configured with a plurality of compartments.

6. The secure information exchange system according to claim 5, wherein

each of the plurality of compartments stores a category of the desired information.

7. The secure information exchange system according to claim 5, wherein

each of the plurality of compartments is accessible by at least one designated permitted accessor.

8. The secure information exchange system according to claim 1, wherein

the digital repository resides in a highly secure computer server and works in concert with a security means for high security.

9. The secure information exchange system according to claim 1,

the digital repository resides in network compliant device.

10. The secure information exchange system according to claim 1, further comprising:

a plurality of enciphering keys.

11. The secure information exchange system according to claim 10, wherein

each of the plurality of enciphering keys corresponds to a distinct authorized supplier.

12. The secure information exchange system according to claim 10, wherein

each of the plurality of enciphering keys is associated with one of a plurality of categories of desired information.

13. The secure information exchange system according to claim 10, wherein

each of the plurality of enciphering keys is associated with one of a plurality of compartments of the digital repository.

14. The secure information exchange system according to claim 10, wherein

the plurality of enciphering keys are characterized as public keys.

15. The secure information exchange system according to claim 1, further comprising:

means for decrypting the desired information.

16. The secure information exchange system according to claim 15, further comprising:

a plurality of deciphering keys.

17. The secure information exchange system according to claim 16, wherein

each of the plurality of deciphering keys corresponds to a permitted accessor.

18. The secure information exchange system according to claim 16, further comprising:

means for determining whether the permitted accessor is an authorized supplier permitted to modify the desired information, originally deposited thereby, stored in the digital repository.

19. The secure information exchange system according to claim 16, wherein

each of the plurality of deciphering keys is associated with one of a plurality of categories of desired information.

20. The secure information exchange system according to claim 16, wherein

each of the plurality of deciphering keys is associated with one of a plurality of compartments of the digital repository.

21. The secure information exchange system according to claim 16, wherein

the plurality of deciphering keys are characterized as public keys.

22. The secure information exchange system according to claim 1, further comprising:

a public key encryption means for encrypting and decrypting the desired information.

23. The secure information exchange system according to claim 1, wherein each of the plurality of compartments stores a category of the desired information.

24. The secure information exchange system according to claim 1, further comprising:

means for receiving information including candidate supplier information, candidate accessor information, contents, or a combination thereof.

25. The secure information exchange system according to claim 24, further comprising:

means for determining, based on the candidate supplier information and the specification, whether the candidate supplier is one of the authorized suppliers.

26. The secure information exchange system according to claim 24, further comprising:

means for determining, based on the contents and the specification, whether the contents contain desirable information.

27. The secure information exchange system according to claim 24, wherein

the candidate supplier information includes information related to the candidate supplier'"'"'s identity, credentials, or both.

28. The secure information exchange system according to claim 24, wherein

the candidate accessor information includes information related to the candidate accessor'"'"'s identity, credentials, or both.

29. The secure information exchange system according to claim 24, wherein

the contents includes information related to categories or semantics thereof.

30. The secure information exchange system according to claim 1, wherein

the digital repository is configured with a plurality of compartments.

31. The secure information exchange system according to claim 30, further comprising:

means for specifying what each of the plurality of compartments stores.

32. The secure information exchange system according to claim 31, further comprising:

means for enabling the owner of the digital repository to interact with said means for specifying.

33. The secure information exchange system according to claim 1, further comprising:

means for preventing accessors without access permission from accessing the desired information.

34. The secure information exchange system according to claim 1, further comprising:

means for pulling the desired information stored in the digital repository in response to a query.

35. The secure information exchange system according to claim 34, further comprising:

means for evaluating the query.

36. The secure information exchange system according to claim 1, further comprising:

means for evaluating standing queries in response to a change to the desired information stored in the digital repository.

37. The secure information exchange system according to claim 36, further comprising:

means for selecting appropriate standing queries affected by the change for evaluation.

38. The secure information exchange system according to claim 1, further comprising:

means for pushing the desired information stored in the digital repository to at least one permitted accessor.

39. The secure information exchange system according to claim 1, wherein

the digital repository having means for implementing a predetermined notification method.

40. The secure information exchange system according to claim 1, wherein

the digital repository conforms to a predetermined communication protocol.

41. The secure information exchange system according to claim 1, further comprising:

a plurality of distinct digital repositories, each having its own authorized suppliers, permitted accessors, and storage means.

42. The secure information exchange system according to claim 41, further comprising:

means for caching the desired information in more than one digital repository.

43. The secure information exchange system according to claim 41, further comprising:

means for forwarding the desired information from one digital repository to another digital repository, network compliant device, or server over one or more networks employing one or more communication protocols.

44. The secure information exchange system according to claim 43, wherein

each network is characterized as a wired network, a wireless network, or a combination thereof.

45. The secure information exchange system according to claim 1, further comprising:

a computer product for implementing the digital repository, the computer product comprising a computer readable medium carrying computer-executable instructions implementing functions of the digital repository, including interacting with the authorized depositors, the permitted accessors, and the owner.

46. The secure information exchange system according to claim 1, further comprising:

means for enabling the authorized suppliers to specify which of the permitted accessors receives what content of the desired information.

47. The secure information exchange system according to claim 1, further comprising:

means for enabling the permitted accessors to specify the desired information, to specify how the desirable information is accessed, and to specify which of the desired information is to be pushed.

48. The secure information exchange system according to claim 1, further comprising:

means for assuring each of the authorized suppliers that the desired information supplied thereby reaches only those of the permitted accessors that match specifications respectively defined by each of the authorized suppliers.

49. The secure information exchange system according to claim 1, further comprising:

means for assuring each of the permitted accessors receives no other information but all that is available in the digital repository and that satisfies interests respectively specified by the owner or any of the permitted accessors.

50. The secure information exchange system according to claim 1, further comprising:

means for organizing content of the desired information stored in the digital repository.

51. The secure information exchange system according to claim 50, further comprising:

means for classifying the content of the desired information into one or more categories.

52. The secure information exchange system according to claim 51, wherein

the one or more categories are characterized as hierarchical, semantic, conceptual, or polymorphic.

53. The secure information exchange system according to claim 51, further comprising:

means for expanding the one or more categories through application of logic rules.

54. The secure information exchange system according to claim 1, further comprising:

means for classifying an object of the desired information in multiple categories and correspondingly storing the object in multiple compartments of the digital repository by reference.

55. The secure information exchange system according to claim 1, further comprising:

means for removing objects of the desired information that are characterized as redundant, superseded, or expired.