Method and system for secure wireless database management

• US 20020146129A1
• Filed: 11/01/2001
• Published: 10/10/2002
• Est. Priority Date: 11/09/2000
• Status: Abandoned Application

• Current Assignee: Intellectual Ventures Assets 191 LLC (Intellectual Ventures LLC)
• Original Assignee: Intellectual Ventures Assets 191 LLC (Intellectual Ventures LLC)
• Inventors: Kaplan, Ari D.
• Application Number:
  US10/040,524
• Publication Number:
  US 20020146129A1
• Time in Patent Office: Days
• US Class Current: 380/270
• CPC Class Codes: G06F 16/9577 Optimising the visualization of content, e.g. distillation of HTML documents
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 67/2895 Intermediate processing functionally located close to the data provider application, e.g. reverse proxies
• CPC Class Codes: H04L 67/55 Push-based network services
• CPC Class Codes: H04L 67/5682 Policies or rules for updating, deleting or replacing the stored data
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04W 24/00 Supervisory, monitoring or testing arrangements
• CPC Class Codes: H04W 76/11 Allocation or use of connection identifiers
• CPC Class Codes: Y10S 707/99931 Database or file accessing
• CPC Class Codes: Y10S 707/99933 Query processing, i.e. searching
• CPC Class Codes: Y10S 707/99935 Query augmenting and refining, e.g. inexact access
• CPC Class Codes: Y10S 707/99943 Generating database or data structure, e.g. via user interface

Abstract

A method for maintaining the security of a wireless database management system (WDMS) including steps of encrypting data for transmission through both hard-wired and wireless networks, authenticating user identities, timing out idle connections, assigning sessions, and categorizing types of user access. Each component of the structure of a WDMS is described along with the various security techniques employed for securing the data transmitted and received by that component.

Claims

1. A method for securing data within a wireless database management system, the method comprising the steps of:

encrypting data transferred within a wireless database management system with a public key method;

encrypting data transferred within a wireless database management system with a private key method; and

encrypting data transferred between a wireless base station and a server with a low-layer security protocol.

2. The method of claim 1 further comprising the step of:

limiting access to a wireless database management system with a firewall between a server and the Internet.

3. The method of claim 2 further comprising the step of:

limiting access to a wireless database management system with a firewall between a database server and a server.

4. The method of claim 1 further comprising the step of:

timing out connections between a wireless device and a server.

5. The method of claim 1 further comprising the step of:

authenticating the identity of a user of a wireless database management system.

6. The method of claim 1 further comprising the step of:

categorizing users of a wireless database management system into groups that are allowed different levels of access to a database.

7. The method of claim 1 further comprising the step of:

coding queries made to a database server by a user of a wireless device, and storing those queries and codes in memory.

8. The method of claim 1 further comprising the step of:

identifying a session that a user of a wireless device has established with a server with a session identification phrase, and storing the session identification phrase in memory.

9. The method of claim 4 further comprising the step of:

allowing the timing out of connections between a wireless device and a server to be adjusted.

10. The method of claim 1 further comprising the step of:

using a controlled wireless proxy server for securing data transferred between a wireless base station and the Internet.

11. The method of claim 10 further comprising the steps of:

limiting access to a wireless database management system with a firewall between a server and the Internet;

using a controlled server for securing data transferred on the Internet; and

connecting an Intranet to a controlled server on the Internet through the firewall.

12. The method of claim 11 further comprising the step of:

limiting access to a wireless database management system with a firewall between a database server and a server.

13. The method of claim 1 further comprising the step of:

compressing and parsing data transferred between a wireless device and a wireless base station.

14. The method of claim 1 further comprising the step of:

nicknaming the address of a database.

15. The method of claim 14 further comprising the step of:

storing the nickname and its address in memory.

17. The method of claim 16 further comprising the step of:

allowing the timing out of connections between a wireless device and a server to be adjusted.

18. The method of claim 16 further comprising the steps of:

encrypting data transferred within a wireless database management system with a public key method;

encrypting data transferred within a wireless database management system with a private key method; and

encrypting data transferred between a wireless base station and a server with a low-layer security protocol.

19. The method of claim 16 further comprising the step of:

limiting access to a wireless database management system with a firewall between a server and the Internet.

20. The method of claim 16 further comprising the step of:

limiting access to a wireless database management system with a firewall between a database server and a server.

21. The method of claim 16 further comprising the step of:

categorizing users of a wireless database management system into groups that are allowed different levels of access to a database.

22. The method of claim 16 further comprising the step of:

coding queries made to a database server by a user of a wireless device, and storing those queries and codes in memory.

23. The method of claim 16 further comprising the step of:

using a controlled wireless proxy server for securing data transferred between a wireless base station and the Internet.

24. The method of claim 23 further comprising the steps of:

limiting access to a wireless database management system with a firewall between a server and the Internet;

using a controlled server for securing data transferred on the Internet; and

connecting an Intranet to a controlled server on the Internet through the firewall.

25. The method of claim 24 further comprising the step of:

limiting access to a wireless database management system with a firewall between a database server and a server.

26. The method of claim 16 further comprising the step of:

nicknaming the address of a database.

27. The method of claim 26 further comprising the step of:

storing the nickname and its address in memory.

28. The method of claim 16 further comprising the step of:

compressing and parsing data transferred between a wireless device and a wireless base station.

16. A method for securing data within a wireless database management system, the method comprising the steps of:

authenticating the identity of a user of a wireless database management system;

identifying a session that a user of a wireless device has established with a web server with a session identification phrase, and storing the session identification phrase in memory; and

timing out connections between a wireless device and a server.