Data management system

• US 7,818,581 B2
• Filed: 04/28/2008
• Issued: 10/19/2010
• Est. Priority Date: 11/16/2001
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Perez, Ronald, Shub, Michael I., Lacan, Francis M., Tresser, Charles P.
• Primary Examiner(s): Hoffman; Brandon S
• Application Number:
  US12/110,995
• Publication Number:
  US 20080222429A1
• Time in Patent Office: 904 Days
• Field of Search: None
• US Class Current: 713/182
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes

Abstract

A data management system and method are provided. Specifically, the present invention includes a system for controlling access to data and ensuring that the confidentiality of the data maintained. In addition, the present invention provides a system for updating data so that confidential data, which has become non-confidential, can be identified and exposed.

Claims

1. A data management system, comprising:

an access control system for limiting access to the data management system to authorized entities;

a data confidentiality system for identifying details in received data, the received data being operational risk data that is received at randomly generated time intervals in a secured manner from an authorized provider, as one of secret, temporarily secret, possibly secret, and not secret, wherein secret, temporarily secret and possibly secret comprise confidential details and concealing confidential details in received data from a requester while allowing a composite analysis to be performed by the requester that is based on the confidential details;

a data storage system for storing the received data; and

a data update system for periodically automatically examining stored data to identify and expose any confidential details that have become non-confidential details.

2. The system of claim 1, further comprising:

a data decryption system for decrypting received data;

a data verification system for verifying an accuracy of received data;

a program approval system for approving systems for analyzing the stored data; and

a key security system for protecting encryption keys.

3. The system of claim 1, wherein stored data is analyzed with a data analysis system.

4. The system of claim 3, wherein the data analysis system is permitted to analyze the stored data based upon approval by full rights members of the data management system.

5. The system of claim 1, wherein data management system is a tamper resistant, tamper evident, tamper sensitive, tamper reactive, and programmable system.

6. The system of claim 1, wherein the received data and the stored data are operational risk data.

7. The system of claim 1, wherein the system mitigates operational risk.

8. The system of claim 1, wherein data is received based upon a randomly generated time interval.

9. The system of claim 1, wherein the confidential details cannot be accessed by any entity.

10. The system of claim 1, wherein the confidential details can only be accessed by a plurality of entities acting in concert.

11. The system of claim 1, further comprising a customer relationship management tool for verifying a policy of an entity.

12. A data management system, comprising:

an access control system for limiting access to the data management system to authorized entities;

a data decryption system for receiving at randomly generated time intervals and decrypting received operational risk data received in a secured manner from an authorized provider;

a data confidentiality system for identifying details in the received data as one of secret, temporarily secret, possibly secret and not secret, wherein secret, temporarily secret and possibly secret comprise confidential details and concealing confidential details in the received data from a requester while allowing a composite analysis to be performed by the requester that is based on the confidential details;

a data storage system for storing received data after the confidential details have been concealed;

a data update system for periodically examining stored data to identify and expose any confidential details that have become non-confidential details;

a program approval system for approving systems for analyzing the stored data; and

a key security system for protecting encryption keys.

13. The system of claim 12, wherein stored data is analyzed with a data analysis system.

14. The system of claim 13, wherein the data analysis system is permitted to analyze the stored data by the program approval system based upon approval by full rights members of the data management system.

15. The system of claim 12, wherein a provider submits the operational risk data to the data management system, and wherein a requester accesses the stored data.

16. A program product stored on a computer readable storage medium, for managing data, which when executed, comprises:

an access control system for limiting access to the data management system to authorized entities;

a data confidentiality system for identifying details in received data, the received data being operational risk data that is received at randomly generated time intervals in a secured manner from an authorized provider, as one of secret, temporarily secret, possibly secret and not secret, wherein secret, temporarily secret, and possibly secret comprise confidential details and concealing confidential details in the received data from a requester while allowing a composite analysis to be performed by the requester that is based on the confidential details;

a data storage system for storing the received data; and

a data update system for periodically examining stored data to identify and expose any confidential details that have become non-confidential details.

17. The program product of claim 16, further comprising:

a data decryption system for decrypting received data;

a data verification system for verifying an accuracy of received data;

a program approval system for approving systems for analyzing the stored data; and

a key security system for protecting encryption keys.

18. The program product of claim 16, further comprising a data analysis system for analyzing the stored data.

19. The program product of claim 16, wherein the data analysis system is approved by full rights member.

20. The program product of claim 16, wherein the received data is operational risk data.