Method and apparatus for protecting material on storage media

• US 5,065,429 A
• Filed: 10/14/1990
• Issued: 11/12/1991
• Est. Priority Date: 04/03/1989
• Status: Expired due to Term

• Current Assignee: Lanrald Data Mgmt Nv LLC (Intellectual Ventures LLC)
• Original Assignee: Gerald S. Lang
• Inventors: Lang, Gerald S.
• Primary Examiner(s): Tarcza, Thomas H.
• Assistant Examiner(s): SWANN, TOD R
• Application Number:
  US07/626,409
• Time in Patent Office: 394 Days
• Field of Search: 380/4, 380/23, 380/24, 380/25, 380/49, 380/50, 364/246.6, 364/246.9, 364/969, 364/969.3, 364/969.4
• US Class Current: 705/56
• CPC Class Codes: G06F 12/1483 using an access-table, e.g. matrix or list
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/80 in storage media based on magnetic or optical technology, e.g. disks with sectors preventing unauthorised reproduction or copying of disc-type recordable media G11B20/00
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G07C 9/33 by means of a password

Abstract

A method and apparatus for granting selected access to material such as data and databases, messages and other textual information, graphs, tables, maps, facsimiles (FAX) of all manner of transmitted materials, audio such as speech and music, video, images, and photographs, provided on storage media utilizing information encoded in the storage media. The storage media are included in one or more reading devices associated with a computer. A storage accessing device, such as a smart card, is used in conjuction with the computer to determine whether access to a particular user to specific storage media is granted. The storage media can be sub-divided into a plurality of logical zones and access to all or a portion of the material on the storage media is granted based upon the logical zones to which the user is allowed access. Information provided on the storage media would include an index table listing the security identification code, the logical zones to which a particular user is assigned as well as a personal security key used in conjunction with a personal security key provided in the smart card. The interaction between the user'"'"'s personal accessing device and the index table provided on the storage media determine if access is granted as well as access privileges accorded to the user.

Claims

1. A security system for granting user access to digitized materials provided on a storage medium or media, said system comprising:

a computer system including at least one computer and a display screen,

a storage medium subdivided into a plurality of management control, program and user logical zones, each of said logical zones provided with particular material therein, said storage medium directly provided thereon with an access management control means for indicating which of said user logical zone on zones the user will be allowed to access based upon accessing information provided to the system by the user, said access management control means provided in said storage medium at a location remote from, and non-contiguous with, said user logical zones;

a reader or drive for reading the digitized material provided in said plurality of logical zones as well as said access management control means of said storage medium;

a personal accessing device containing a security identification code, to enable said personal accessing device to be in communication with said computer system for transmitting said security identification code to said computer system;

wherein, said security identification code is compared to said access management control means provided on said storage medium to determine the particular user logical zone or zones to which the user is allowed access utilizing said display screen of said computer system.

2. The security system in accordance with claim 1, wherein said personal accessing device is initiated by a correct personal identification code entered by the user.

3. The security system in accordance with claim 1 wherein said access management control means and said personal accessing device are further provided with a particular personal security key code associated with said security identification code for each authorized user, and said computer system is further provided with a random number generator, both said computer system or alternately said storage medium and said personal accessing device further provided with identical or cooperating encryption decryption algorithm for utilizing a number generated by said random number generator for determining whether user access is granted to one or more particular logical zones associated with the user'"'"'s security identification code.

4. The security system in accordance with claim 3 wherein said security identification code consists of a zone access code portion corresponding to logical zone access assigned to a particular user and a system identification code corresponding uniquely to the user and paired to said personal security key code.

5. The security system in accordance with claim 1 wherein said personal accessing device is provided with a series of input keys and a display for displaying a user'"'"'s security identification code based upon a correct personal identification code entered into said personal accessing device by the user to enable the said personal accessing device, and wherein said computer system includes a keyboard for entering the security identification code displayed on said personal accessing device.

6. The security system in accordance with claim 1, wherein access is granted to a plurality of removable storage media.

7. The security system in accordance with claim 1 in which said storage medium is removably provided in said computer system.

8. A security system for granting user access to non-software programs provided on a storage medium, said system comprising:

a computer system including at least one computer and a display screen;

a storage medium provided with non-software programmed material therein, said storage medium directly provided thereon with an access management control means for indicating whether the user will be allowed access to said storage medium or media accessing information provided to the system by the user, said access management control means provided in said storage medium at a location remote from, and non-contiguous with, said user logical zones;

a reader for reading the non-software programmed material provided on said storage media;

a personal accessing device containing a security identification code, said personal accessing device in communication with said information processing device for transmitting said security identification code to said computer system;

wherein said security identification code is compared to said access management control means provided on said storage medium to be used in the process of determining whether a user will be allowed access to the storage medium utilizing said display screen of said computer system.

9. The security system in accordance with claim 8 wherein said access management control means and said personal accessing device are further provided with a particular personal security key code or codes associated with said security identification code, said computer system further provided with a random number generator, both said information processing device and said personal accessing device further provided with identical or cooperating encryption/decryption algorithms for utilizing a number generated by said random number generator and operated upon independently using the respective personal security key codes, for determining whether user access shall be granted to specific portions or all of the storage medium.

10. The security system in accordance with claim 8 wherein said personal accessing device is provided with a series of input keys and a display for displaying a user'"'"'s security identification code based upon a correct personal identification code entered into said personal accessing device by the user, and wherein said computer system includes a keyboard for entering the security identification code displayed on said personal accessing device.

11. The security system in accordance with claim 8, wherein access is granted to a plurality of removable storage media.

12. The security system in accordance with claim 8 wherein personal accessing device is initiated by a personal identification code entered by the user.

13. The security system in accordance with claim 8 in which said storage medium is removably provided in said computer system.

14. A method of granting user access to material provided on a storage medium, adapted to be read by a reader or drive in communication with a computer system including at least one computer, said storage media containing one or a plurality of management information control, program and user logical zones, comprising the steps of:

assigning security identification codes to all users allowed access to the storage medium or media;

preparing an access management control means for indicating to which of said user logical zones a particular user is allowed access corresponding to said security identification codes said access management control means provided in the storage medium at a location remote from, and non-continuous with said user logical zones;

recording said access management control means directly on the storage medium or media;

presenting a security identification code personalized for each user to the computer system utilizing a personal accessing device;

comparing, in the computer system said security identification code to said access management control means containing security identification codes directly recorded on storage medium to determine wherein the accessor is a potential authorized user of the storage medium.

15. The method of granting user access to a storage medium in accordance with claim 14 further including the step of determining the user logical zone or zones to which a particular user is granted access and whether the authorized user can have downloading privileges, based upon said comparing step.

16. The method of granting user access to a storage medium or media in accordance with claim 15 further including the steps of:

including personal security key codes associated with each of said security identification codes in said access management control means and further including a personal security key code associated with a particular user in the personal accessing device;

generating a random number in said information processing device;

displaying said random number on said computer system;

utilizing said random number and said personal security key code associated with a particular security identification code to produce an output code based upon an encryption/decryption algorithm provided in said computer system;

utilizing said random number and said personal security key code included in the personal accessing device to produce an output code based upon an encryption/decryption algorithm provided in the personal accessing device identical to the computer system'"'"'s encryption/decryption algorithm; and

examining the output codes produced in said utilizing step to determine whether access is granted to the storage medium or media.

17. The method of granting user access to a storage medium in accordance with claim 16 further including the steps of:

entering a correct personal identification code in the personal accessing device which would release the stored security identification code; and

entering or transmitting the security identification code generated in said previous step into the computer system.

18. The method of granting user access to a storage medium in accordance with claim 17 including the steps of:

entering or transmitting the random number generated by computer system directly into the personal accessing device;

displaying the output code generated by the personal accessing device;

entering or transmitting the output code generated by said previous step in the computer system; and

retrieving by said information processing device of the system security key code stored in each storage medium.

19. The method of granting user access to a storage medium in accordance with claim 15, further including the step of determining whether the authorized user has been assigned downloading privileges, based upon said comparing step.

20. The method of granting user access to a storage medium in accordance with claim 14 further including the steps of:

including personal security key codes associated with each of said security identification codes in said access management control means and further including functionally matching personal security key code associated with a particular user of the personal accessing device;

generating a random number in said computer system;

displaying said random number and said personal security key code associated with a particular security identification code to produce an output code based upon an encryption/decryption algorithm provided in said computer system;

utilizing said random number and said personal security key code included in the said personal accessing device to produce an output code based upon the encryption/decryption algorithm provided in the personal accessing device identical to the computer'"'"'s encryption/decryption algorithm;

decrypting and examining the output codes produced in said utilizing step to verify that the user possesses the knowledge and tool of the authorized user to determine whether access is granted to whole or portions of the storage medium or media; and

retrieving the system security key stored in the storage medium or media and transferring to secure volatile portion of the computer'"'"'s memory or encryption/decryption processor chip.

21. The method of granting user access to a storage medium in accordance with claim 20 further including the steps of:

entering the correct personal identification code in the personal accessing device which would release the stored security identification code for display or transmittal;

entering or transmitting the security identification code generated in said previous step into the computer system.

22. The method of granting user access to a storage medium or media in accordance with claim 21 including the steps of:

entering or transmitting the random number generated by the computer system directly into the personal accessing device;

displaying the output code generated by the personal accessing device; and

entering and transmitting the output code generated by said previous step in the computer system.

23. The method in accordance with claim 20 in which said storage medium is removably provided in said computer system.

24. The security system in accordance with claim 14 in which said storage medium is removably provided in said computer system.