INFORMATION RECORD INFRASTRUCTURE, SYSTEM AND METHOD

• US 20100241595A1
• Filed: 05/29/2010
• Published: 09/23/2010
• Est. Priority Date: 07/06/2000
• Status: Active Grant

• Current Assignee: RPX Corporation
• Original Assignee: David Paul Felsher
• Inventors: Felsher, David Paul
• Granted Patent: US 8,380,630 B2
• Time in Patent Office: Days
• US Class Current: 705/400
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 30/0283 Price estimation or determination
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16H 10/65 stored on portable record carriers, e.g. on smartcards, RFID tags or CD
• CPC Class Codes: G16H 40/67 for remote operation

Abstract

A security mediator, comprising an input configured to receive a user information request; an automated index, stored in a memory, configured to store information for determining which of a plurality of remote databases stores information responsive to the request; an automated security rule base, stored in a memory, containing rules applicable to information responsive to the request stored in the plurality of remote databases; a communication port configured to communicate to a plurality of remote databases which store information responsive to the request: security information, a query corresponding to the request and associated rules applicable to the information responsive to the request at the respective remote database; and at least one processor being configured to apply at least one security rule responsive to the query of the automated security rule base, and index information derived from a plurality of the remote databases, in a manner which permits application of the rules and which restricts insecure use of the index.

Claims

1. An method for security mediation, comprising:

receiving a user information request;

querying an automated index to determine which of a plurality of remote databases stores information responsive to the request;

querying an automated security rule base containing rules applicable to information responsive to the request stored in the plurality of remote databases;

automatically communicating to each of the plurality of remote databases which store information responsive to the request;

authorization information, a query corresponding to the request, and at least a subset of the rules applicable to information responsive to the request;

receiving at least a status response from at least one of the plurality of remote databases which store information responsive to the request;

automatically indexing information responsive to the request from a plurality of remote databases in a manner which permits application of the rules; and

communicating at least the index of the responsive information.

2. The method according to claim 1, further comprising authorizing access to the information responsive to the request based on compliance with the rules.

3. The method according to claim 1, further comprising defining at least one economic compensation rule, which imposes a cost for access to the information responsive to the request.

4. The method according to claim 1, further comprising logging at least the request and authorization information.

5. The method according to claim 1, further comprising automatically selectively restricting redistribution of the information responsive to the request in dependence on at least one rule.

6. The method according to claim 1, wherein the querying an automated index comprises determining a set of records whose content is associated with a common entity.

7. The method according to claim 1, further comprising communicating an electronic security token conveying an authorization for information responsive to the request.

8. The method according to claim 1, further comprising generating a security applet, wherein at least one of an access and a use of information protected by the applet automatically generates an on-line transaction.

9. A security mediation method, comprising:

receiving a user information request;

querying an automated index to determine which of a plurality of remote databases stores information responsive to the request;

querying an automated security rule base containing rules applicable to information responsive to the request stored in the plurality of remote databases;

complying with at least one security rule responsive to the query of the automated security rule base;

communicating to each of the plurality of remote databases which store information responsive to the request;

security information, a query corresponding to the request, and associated rules applicable to the information responsive to the request at the respective remote database;

indexing information derived from a plurality of the remote databases, responsive to the request, in a manner which permits application of the rules and which restricts insecure use of the index; and

communicating at least the index of the responsive information.

10. The method according to claim 9, further comprising authorizing access to the information responsive to the request based on compliance with the rules.

11. The method according to claim 9, further comprising defining at least one economic compensation rule, which imposes a cost for access to the information responsive to the request.

12. The method according to claim 9, further comprising logging at least the request and authorization information.

13. The method according to claim 9, further comprising automatically selectively restricting redistribution of the information responsive to the request in dependence on at least one rule.

14. The method according to claim 9, further comprising communicating an electronic security token conveying an authorization for information responsive to the request.

15. The method according to claim 9, further comprising generating a security applet, wherein at least one of an access and a use of information protected by the applet automatically generates an on-line transaction.

16. A security mediator, comprising:

an input configured to receive a user information request;

an automated index, stored in a memory, configured to store information for determining which of a plurality of remote databases stores information responsive to the request;

an automated security rule base, stored in a memory, containing rules applicable to information responsive to the request stored in the plurality of remote databases;

a communication port configured to communicate to a plurality of remote databases which store information responsive to the request;

security information, a query corresponding to the request, and associated rules applicable to the information responsive to the request at the respective remote database; and

at least one processor being configured to apply at least one security rule responsive to the query of the automated security rule base, and index information derived from a plurality of the remote databases, in a manner which permits application of the rules and which restricts insecure use of the index.

17. The security mediator according to claim 16, wherein the at least one processor is further configured to authorize access to the information responsive to the request based on compliance with the rules.

18. The security mediator according to claim 16, further comprising a memory configured to store at least one economic compensation rule, which defines at least a cost for access to the information responsive to the request.

19. The security mediator according to claim 16, wherein the at least one processor is further configured to log at least the request and authorization information.

20. The security mediator according to claim 16, wherein the at least one processor is further configured to automatically selectively restrict redistribution of the information responsive to the request in dependence on at least one rule.

21. The security mediator according to claim 16, wherein the at least one processor is further configured to communicate an electronic security token conveying an authorization for information responsive to the request.

22. The security mediator according to claim 16, wherein the at least one processor is further configured to generate a security applet, which automatically applies at least one rule from the rule base dependent on at least one of an access and a use of an information polymer protected by the applet.