Data security system and method

• US 7,552,482 B2
• Filed: 08/17/2006
• Issued: 06/23/2009
• Est. Priority Date: 11/13/2000
• Status: Expired due to Term

• Current Assignee: DigitalDoors, Inc.
• Original Assignee: DigitalDoors, Inc.
• Inventors: Nemzow, Martin A., Redlich, Ron M.
• Primary Examiner(s): Moise, Emmanuel L
• Assistant Examiner(s): PYZOCHA, MICHAEL J
• Application Number:
  US11/465,309
• Publication Number:
  US 20060288425A1
• Time in Patent Office: 1,041 Days
• Field of Search: 726/27, 713/166, 713/193, 715/255
• US Class Current: 726/27
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2221/2147 Locking files

Abstract

The method for securing data on a personal computer having security sensitive content grouped into security levels, each with a clearance code, includes filtering and extracting sensitive content by security level and separately storing the security content in remote extract stores. Remainder data is stored locally or remotely. A map for selected extract stores may be generated. The filter and/or map may be destroyed or stored. The data input, extracted data and remainder data may be deleted from the originating computer. Encryption may be utilized to enhance security (including transfers of data, filter and map). Reconstruction of the data is permitted only in the presence of a predetermined security clearance. Full or partial reconstruction is possible, based upon the security clearances. A computer readable medium containing programming instructions and an information processing system is encompassed.

Claims

1. A method of securing data on a personal computer having security sensitive content represented by one or more security sensitive words, characters, images or data objects therein, said security sensitive content having a plurality of security levels, each security level having an associated security clearance, the method of securing data deployed in a distributed computer system with a plurality of other computers and a plurality of extract data stores for respective ones of said plurality of security levels, said personal computer, said other computers and said extract data stores operatively connected together over a communications network comprising:

accepting data input which includes security sensitive content via said personal computer;

extracting said security sensitive content to obtain extracted data for each corresponding security level and remainder data;

storing said extracted data for each corresponding security level in the respective extract store and storing said remainder data in at least one of said personal computer and other computers; and

,

permitting full or partial reconstruction of said data with corresponding extracted data and remainder data after accessing said respective extract stores for corresponding security levels with said associated security clearances.

2. A method as claimed in claim 1 including providing a remainder store operatively connected together over a communications network to said personal computer and said other computers, and wherein storing of said remainder data occurs at one of said other computers, said personal computer and a remainder data store in said distributed computer system.

3. A method as claimed in claim 1 wherein storing or extraction occurs with encryption corresponding to said respective ones of said plurality of security levels.

4. A method as claimed in claim 3 wherein accepting or storing or permitting reconstruction occurs with decryption corresponding to said respective ones of said plurality of security levels.

5. A method as claimed in claim 1 wherein permitting full or partial reconstruction of said data occurs at one of said personal computer and said other computers.

6. A method as claimed in claim 2 wherein storing of said remainder data occurs at said personal computer on one of a fixed memory and a removable memory at said personal computer.

7. A method as claimed in claim 1 including storing a map or locating data for said respective extract stores.

8. A method as claimed in claim 7 wherein the storing of said map or locating data occurs at one of said personal computer and said other computers.

9. A method as claimed in claim 8 wherein the storing of said map or locating data occurs at said personal computer in one of a fixed memory and a removable memory.

10. A method as claimed in claim 8 including providing a remote memory map store, remotely disposed over said communications network with respect to said other computers and wherein the storing of said map or locating data occurs at one of said personal computer and said other computers and said memory map store.

11. A method as claimed in claim 7 including encrypting at least one of said extracted data prior to storage, said remainder data prior to storage, and said map prior to storage.

12. A method as claimed in claim 11 including decrypting said at least one of said extracted data prior to reconstruction, said remainder data prior to reconstruction, and said map prior to reconstruction.

13. A method as claimed in claim 12 including providing a remote memory map store, remotely disposed over said communications network with respect to said other computers and wherein the storing of said map or locating data occurs at one of said personal computer and said other computers and said memory map store.

14. A method as claimed in claim 1 including establishing a plurality of filters for groups of security sensitive content corresponding to respective ones of said plurality of security levels and using said filter during the extraction of security sensitive content.

15. A method as claimed in claim 14 including storing said plurality of filters on one of said personal computer and said other computers in one of fixed memory and removable memory.

16. A method as claimed in claim 15 including encrypting and decrypting said plurality of filters for respective ones of said plurality of security levels.

17. A method as claimed in claim 15 including one of destroying or storing the filter after extraction.

18. A method as claimed in claim 1 including

establishing a plurality of filters corresponding to groups of security sensitive content for respective ones of said plurality of security levels and using a respective filter during the extraction of security sensitive content for said each corresponding security level;

storing said plurality of filters on said personal computer in one of fixed memory and removable memory;

encrypting and decrypting said plurality of filters for respective ones of said plurality of security levels; and

one of destroying or storing the filters after extraction.

19. A method as claimed in claim 18 including accepting a download of said plurality of filters prior to storing said plurality of filters on said personal computer.

20. A method as claimed in claim 14 wherein said filters identify either by inclusion or exclusion said security sensitive content.

21. A method as claimed in claim 1 including deleting said data input after storing.

22. A method as claimed in claim 12 including deleting said map after full reconstruction.

23. A method as claimed in claim 1 wherein said personal computer includes a display fed from video memory having a plurality of frame memory segments, the reconstruction including interleaving extracted data and remainder data into respective ones of said plurality of frame memory segments of said personal computer.

24. A method as claimed in claim 1 wherein said personal computer includes a data display system with at least two separate but visually overlaid displays and at least two respective display interfaces, the reconstruction including displaying said extracted data on one of said at least two displays and displaying said remainder data on another of said at least two displays of said personal computer.

25. A method as claimed in claim 1 wherein extracting occurs either automatically or manually with operator input.

26. A computer readable storage medium containing programming instructions for securing data on a personal computer having security sensitive content represented by one or more security sensitive words, characters, images or data objects therein, said security sensitive content having a plurality of security levels, each security level having an associated security clearance, the method of securing data deployed in a distributed computer system with a plurality of other computers and a plurality of extract data stores for respective ones of said plurality of security levels, said personal computer, said other computers and said extract data stores operatively connected together over a communications network, the programming instructions comprising:

accepting data input which includes security sensitive content via said personal computer;

extracting said security sensitive content to obtain extracted data for each corresponding security level and remainder data;

storing said extracted data for each corresponding security level in the respective extract store and storing said remainder data in at least one of said personal computer and other computers; and

,

permitting full or partial reconstruction of said data with corresponding extracted data and remainder data after accessing said respective extract stores for corresponding security levels with said associated security clearances.

27. A computer readable storage medium containing programming instructions as claimed in claim 26 including providing a remainder store operatively connected together over a communications network to said personal computer and said other computers, and wherein said storing of said remainder data occurs at one of said other computers, said personal computer and a remainder data store in said distributed computer system.

28. A computer readable storage medium containing programming instructions as claimed in claim 26 wherein said storing or extraction occurs with encryption corresponding to said respective ones of said plurality of security levels.

29. A computer readable storage medium containing programming instructions as claimed in claim 28 wherein accepting or storing or permitting reconstruction occurs with decryption corresponding to said respective ones of said plurality of security levels.

30. A computer readable storage medium containing programming instructions as claimed in claim 26 wherein permitting full or partial reconstruction of said data occurs at one of said personal computer and said other computers.

31. A computer readable storage medium containing programming instructions as claimed in claim 27 wherein storing of said remainder data occurs at said personal computer on one of a fixed memory and a removable memory at said personal computer.

32. A computer readable storage medium containing programming instructions as claimed in claim 26 including storing a map or locating data for said respective extract stores.

33. A computer readable storage medium containing programming instructions as claimed in claim 32 wherein the storing of said map or locating data occurs at one of said personal computer and said other computers.

34. A computer readable storage medium containing programming instructions as claimed in claim 33 wherein the storing of said map or locating data occurs at said personal computer in one of a fixed memory and a removable memory.

35. A computer readable storage medium containing programming instructions as claimed in claim 33 including providing a remote memory map store, remotely disposed over said communications network with respect to said other computers and wherein the storing of said map or locating data occurs at one of said personal computer and said other computers and said memory map store.

36. A computer readable storage medium containing programming instructions as claimed in claim 26 including encrypting at least one of said extracted data prior to storage, said remainder data prior to storage, and said map prior to storage.

37. A computer readable storage medium containing programming instructions as claimed in claim 36 including decrypting said at least one of said extracted data prior to reconstruction, said remainder data prior to reconstruction, and said map prior to reconstruction.

38. A computer readable storage medium containing programming instructions as claimed in claim 37 including providing a remote memory map store, remotely disposed over said communications network with respect to said other computers and wherein the storing of said map or locating data occurs at one of said personal computer and said other computers and said memory map store.

39. A computer readable storage medium containing programming instructions as claimed in claim 26 including establishing a plurality of filters for groups of security sensitive content corresponding to respective ones of said plurality of security levels and using said filter during the extraction of security sensitive content.

40. A computer readable storage medium containing programming instructions as claimed in claim 39 including storing said plurality of filters on one of said personal computer and said other computers in one of fixed memory and removable memory.

41. A computer readable storage medium containing programming instructions as claimed in claim 40 including encrypting and decrypting said plurality of filters for respective ones of said plurality of security levels.

42. A computer readable storage medium containing programming instructions as claimed in claim 40 including one of destroying or storing the filter after extraction.

43. A computer readable storage medium containing programming instructions as claimed in claim 26 including

establishing a plurality of filters corresponding to groups of security sensitive content for respective ones of said plurality of security levels and using a respective filter during the extraction of security sensitive content for said each corresponding security level;

storing said plurality of filters on said personal computer in one of fixed memory and removable memory;

encrypting and decrypting said plurality of filters for respective ones of said plurality of security levels; and

one of destroying or storing the filters after extraction.

44. A computer readable storage medium containing programming instructions as claimed in claim 43 including accepting a download of said plurality of filters prior to storing said plurality of filters on said personal computer.

45. A computer readable storage medium containing programming instructions as claimed in claim 39 wherein said filters identify either by inclusion or exclusion said security sensitive content.

46. A computer readable storage medium containing programming instructions as claimed in claim 26 including deleting said data input after storing.

47. A computer readable storage medium containing programming instructions as claimed in claim 37 including deleting said map after full reconstruction.

48. A computer readable storage medium containing programming instructions as claimed in claim 26 wherein said personal computer includes a display fed from video memory having a plurality of frame memory segments, the reconstruction including interleaving extracted data and remainder data into respective ones of said plurality of frame memory segments of said personal computer.

49. A computer readable storage medium containing programming instructions as claimed in claim 26 wherein said personal computer includes a data display system with at least two separate but visually overlaid displays and at least two respective display interfaces, the reconstruction including displaying said extracted data on one of said at least two displays and displaying said remainder data on another of said at least two displays of said personal computer.

50. A computer readable storage medium containing programming instructions as claimed in claim 26 wherein extracting occurs either automatically or manually with operator input.

51. An information processing system for securing data on a personal computer having security sensitive content represented by one or more security sensitive words, characters, images or data objects therein, said security sensitive content having a plurality of security levels, each security level having an associated security clearance, the method of securing data deployed in a distributed computer system with a plurality of other computers and a plurality of extract data stores for respective ones of said plurality of security levels, said personal computer, said plurality of other computers and said extract data stores operatively coupled to a communications network comprising:

a filter adapted to receive said data input and to separate said security sensitive content as extracted data for each corresponding security level, leaving remainder data;

means for storing said extracted data for each corresponding security level in the respective extract store and storing said remainder data in at least one of said personal computer and other computers;

an access controller for permitting access to said respective extract stores for corresponding security levels with said associated security clearances; and

,

a compiler, coupled to said means for storing and said access controller, for permitting full or partial reconstruction of said data via said respective extract stores and remainder data based upon said corresponding security levels and associated security clearances.

52. An information processing system as claimed in claim 51 including an encryptor coupled to said means for storing enabling encryption of said extracted data corresponding to said respective ones of said plurality of security levels.

53. An information processing system as claimed in claim 52 including a decryptor coupled to said compiler, for decryption with said means for storing and said compiler during reconstruction, said decryption corresponding to said respective ones of said plurality of security levels.

54. An information processing system as claimed in claim 51 wherein means for storing directs storage of said remainder data at said personal computer on one of a fixed memory and a removable memory at said personal computer.