INFORMATION RECORD INFRASTRUCTURE, SYSTEM AND METHOD

• US 20140222684A1
• Filed: 12/02/2013
• Published: 08/07/2014
• Est. Priority Date: 07/06/2000
• Status: Abandoned Application

• Current Assignee: RPX Corporation
• Original Assignee: RPX Corporation
• Inventors: Felsher, David Paul
• Application Number:
  US14/094,031
• Publication Number:
  US 20140222684A1
• Time in Patent Office: Days
• US Class Current: 705/50
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 30/0283 Price estimation or determination
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16H 10/65 stored on portable record carriers, e.g. on smartcards, RFID tags or CD
• CPC Class Codes: G16H 40/67 for remote operation

Abstract

A data security apparatus and method for controlling access to records provided within automated electronic databases, each record having an associated set of access rules, comprising: receiving, by a security processor, a request for access to records associated with at least one of an entity, attribute, and datum from a requestor; determining a set of records associated with the requested entity, attribute, or datum, contained in the automated electronic databases; authorizing access to the records within the determined set of records based on compliance with the associated set of access rules; defining an economic compensation rule, satisfaction of which is required for qualification for access to the set of records; selectively permitting access to records in dependence on satisfaction of the compensation rule; communicating the access permissions to the host automated electronic databases; and logging the request for retrieval and a respective access of each record.

Claims

1. A data security method for controlling access to a plurality of records provided within a plurality of automated electronic databases, each record having an associated set of access rules, comprising:

receiving, by a security processor, a request for access to one or more records associated with at least one of an entity, attribute, and datum from a requestor;

determining a set of records associated with at least one of the requested entity, attribute, or datum, contained in the plurality of automated electronic databases;

authorizing access to the set of records within the determined set of records based on compliance with the associated set of access rules by at least a requestor;

communicating the access permissions to the host automated electronic databases; and

logging the request for retrieval and a respective access of each record.

2. The method according to claim 1, wherein said selectively permitting access further implements a requirement of a restriction on redistribution of at least one record of the authorized set of records.

3. The method according to claim 1, wherein the security processor determines a set of records associated with a common entity based on the received request for access to one or more records relating to that entity.

4. The method according to claim 1, wherein the security processor receives the request through an internet connection.

5. The method according to claim 1, wherein said determining step comprises defining a query based on the received request, sending the defined query to the plurality of automated electronic databases, receiving responses from the plurality of electronic databases, and formulating a set of records based on the received responses.

6. The method according to claim 1, wherein said authorizing step comprises receiving from a respective electronic database storing a record at least one access rule associated with that record, and applying the received access rule to determine compliance therewith by the requestor.

7. The method according to claim 1, wherein the access permissions are communicated in the form of at least one electronic token communicated to the host automated electronic databases.

8. The method according to claim 1, wherein a record is accessed through a cryptographic wrapper, wherein an access of a respective record generates an on-line transaction.

9. A data security apparatus adapted for controlling access to a plurality of records provided within a plurality of automated electronic databases, each record having an associated set of access rules, comprising:

a security processor, having an input adapted for receiving a request for access to one or more records associated with at least one of an entity, attribute, and datum from a requestor, and a communications port adapted to communicate with the plurality of automated databases;

the security processor automatically;

determining a set of records associated with at least one of the requested entity, attribute, or datum, contained in the plurality of automated electronic databases;

authorizing access to the set of records within the determined set of records based on compliance with the associated set of access rules by at least a requestor;

selectively communicating, through the communications port, access permissions to the host automated electronic databases adapted to permit access to each record within the authorized set of records; and

logging the request for retrieval and a respective access of each record.

10. The apparatus according to claim 9, wherein said security processor requires a restriction on redistribution of at least one record of the authorized set of records as a part of its authorizing.

11. The apparatus according to claim 9, wherein the security processor determines a set of records associated with a common entity based on the received request for access to one or more records relating to that entity.

12. The apparatus according to claim 9, wherein the security processor receives the request through an Internet connection.

13. The apparatus according to claim 9, wherein said security processor defines a query based on the received request, sends the defined query to the plurality of automated electronic databases, receives responses from the plurality of electronic databases, and formulates a set of records based on the received responses.

14. The apparatus according to claim 9, wherein said security processor receives from a respective electronic database storing a record at least one access rule associated with that record, and applies the received access rule to determine compliance therewith by the requestor.

15. The apparatus according to claim 9, wherein the security processor communicates access permissions in the form of at least one electronic token communicated to the host automated electronic databases.

16. A computer readable medium having stored thereon program instructions for controlling a programmable computer to perform a data security method for controlling access to a plurality of records provided within a plurality of automated electronic databases, each record having an associated set of access rules, comprising:

receiving, by a security processor, a request for access to one or more records associated with at least one of an entity, attribute, and datum from a requestor;

determining a set of records associated with at least one of the requested entity, attribute, or datum, contained in the plurality of automated electronic databases;

authorizing access to the set of records within the determined set of records based on compliance with the associated set of access rules by at least a requestor;

selectively permitting access to each record within the authorized set of records;

communicating the access permissions to the host automated electronic databases; and

logging the request for retrieval and a respective access of each record.