Data security system and method

• US 7,103,915 B2
• Filed: 07/27/2001
• Issued: 09/05/2006
• Est. Priority Date: 11/23/2000
• Status: Active Grant

• Current Assignee: DigitalDoors, Inc.
• Original Assignee: DigitalDoors, Inc.
• Inventors: Redlich, Ron M., Nemzow, Martin A.
• Primary Examiner(s): Moise, Emmanuel L.
• Assistant Examiner(s): PYZOCHA, MICHAEL J
• Application Number:
  US09/916,397
• Publication Number:
  US 20020091734A1
• Time in Patent Office: 1,866 Days
• Field of Search: 713/200, 713/201, 713/166, 713/193, 715/751, 715/530, 715/540, 726/27
• US Class Current: 726/27
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2221/2147 Locking files

Abstract

The method for securing data includes establishing a group of security sensitive items, filtering data and extracting and separating the security items from remainder data. The filtered data are separately stored (locally on a PC or on another computer in a LAN or WAN or on the Internet.) A map may be generated. The filter and/or map may be destroyed or stored. The data input, extracted data and remainder data may be deleted from the originating computer. Encryption may be utilized to enhance security (including transfers of data, filter and map). Reconstruction of the data is permitted only in the presence of a predetermined security clearance. A plurality of security clearances may be used to enable a corresponding plurality of partial, reconstructed views of the plaintext (omitting higher security words). A computer readable medium containing programming instructions and an information processing system is encompassed.

Claims

1. A method for securing data in a computer network having a plurality of computers interconnected together, one of said plurality of computers designated as a data input computer and each of said plurality of computers having a memory therein, a plurality of memories respectively designated as a remainder store and a plurality of extract stores in others of said plurality of computers, comprising:

establishing a group of security sensitive words, characters or icons for each of a plurality of security levels, each with a respective security clearance;

filtering data input from said data input computer and extracting said security sensitive words, characters or icons for each security level from said data to obtain extracted data and remainder data;

storing said extracted data in extract stores corresponding to respective security levels and said remainder data in said remainder store; and

,

accessing respective extract stores and permitting full or partial reconstruction of said data via said extracted data and remainder data only in the presence of a respective security clearance corresponding to a respective security level.

2. A method as claimed in claim 1 including defining a filter for a respective security level prior to said filtering step.

3. A method as claimed in claim 2 wherein the step of defining the filter includes the step of establishing said group of security sensitive words, characters or icons and the method includes one of storing said filter or destroying said filter after storing said extracted data.

4. A method as claimed in claim 1 including encrypting one or both of said extracted data and remainder data prior to storing.

5. A method as claimed in claim 4 wherein the step of permitting reconstruction includes decrypting one or both of said extracted data and remainder data.

6. A method as claimed in claim 1 including the step of permitting a plurality of partial reconstructions of said data in the presence of respective ones of said plurality of security clearances.

7. A method as claimed in claim 1 wherein said other computers are each respectively designated by a uniform resource locator (URL) and said storing utilizes said URLs.

8. A method as claimed in claim 1 wherein said other computers are each respectively designated by a uniform resource locator (URL) and said data input computer and said other computers operates as a client in a client-server environment, the method including sending said extracted data from said data input computer to said second computer utilizing said respective URL and client-server protocol.

9. A method as claimed in claim 8 wherein said step of permitting reconstruction includes downloading said extracted data utilizing and said client-server protocol.

10. A method as claimed in claim 1 wherein said other computers are each respectively designated by respective uniform resource locators (URLs) and said data input computer operates as a client in a client-server environment, the method including sending said remainder data and extracted data respectively from said data input computer to said other computers utilizing client-server protocols.

11. A method as claimed in claim 10 wherein said step of permitting reconstruction includes downloading said remainder data and extracted data utilizing corresponding URLs and client-server protocols.

12. A method as claimed in claim 11 including the step of encrypting and decrypting said remainder data and extracted data during sending and downloading.

13. A method as claimed in claim 1 wherein a further one of said computers includes a data display system with at least two separate but visually overlaid displays and at least two respective display interfaces, the step of reconstruction including displaying said extracted data on one of said at least two displays and displaying said remainder data on another of said at least two displays.

14. A method as claimed in claim 1 including deleting said data input from said data input computer after the step of storing.

15. A method as claimed in claim 1 including mapping said plurality of memories.

16. A method for securing data in a computer network with one or more security sensitive words, characters or icons and a plurality of security levels each with a respective security clearance, subsets of said security sensitive words, characters or icons being correlated with respective ones of said plurality of security levels, said computer network having a plurality of computers interconnected together, each of said plurality of computers having a memory therein, one of said plurality of computers designated as a data input computer, a first memory designated as a remainder store in said plurality of computers, and a corresponding plurality of memories in other ones of said plurality of computers designated as extract stores for respective ones of said plurality of security levels, comprising:

filtering data input from said data input computer for said plurality of security levels and extracting said security sensitive words, characters or icons for each of said security levels from said data to obtain extracted data for said security levels and remainder data;

storing said extracted data in extract stores corresponding to respective security levels and said remainder data in said remainder store;

presenting a plurality of predetermined security clearances to obtain access to respective ones of said extract stores; and

,

permitting full or partial reconstruction of said data via said extracted data and remainder data only in the presence of said predetermined security clearance after presentment of respective ones of said plurality of predetermined security clearances.

17. A method as claimed in claim 16 including defining a filter for said security levels prior to said filtering step.

18. A method as claimed in claim 17 wherein the step of defining the filter includes the step of establishing a group of security sensitive words, characters or icons and the method includes one of storing said filter or destroying said filter after storing said extracted data.

19. A method as claimed in claim 16 including encrypting one or both of said extracted data and remainder data prior to storing.

20. A method as claimed in claim 19 wherein the step of permitting reconstruction includes decrypting one or both of said extracted data and remainder data.

21. A method as claimed in claim 16 wherein the step of storing stores remainder data in a different computer as compared with said data input computer and the step of presenting includes a plurality of presenting steps and the step of permitting reconstruction including the step of permitting a plurality of partial reconstructions of said data in the presence of respective ones of said plurality of security clearance levels after presentment.

22. A method as claimed in claim 16 wherein some of said plurality of computers are designated by uniform resource locators (URLs) and said storing utilizes said URLs.

23. A method as claimed in claim 16 wherein said data input computer operates as a client in a client-server environment the method including sending said extracted data from said data input computer to said plurality of servers utilizing a URL and client-server protocol.

24. A method as claimed in claim 23 wherein said step of permitting reconstruction includes downloading said extracted data from said other ones of said computers utilizing said URL and said client-server protocol.

25. A method as claimed in claim 16 wherein said one and said other ones of said plurality computers are designated by respective uniform resource locators (URLs) and said data input computer operates as a client in a client-server environment, the method including sending said remainder data and extracted data respectively from said data input computer to said other ones of said plurality of computers utilizing client-server protocols.

26. A method as claimed in claim 25 wherein said step of permitting reconstruction includes downloading said remainder data and extracted data respectively from said other ones of said plurality of computers utilizing corresponding URLs and client-server protocols.

27. A method as claimed in claim 26 including the step of encrypting and decrypting said remainder data and extracted data during sending and downloading.

28. A method as claimed in claim 16 wherein one of said computers is a reconstruction computer which includes a data display system with at least two separate but visually overlaid displays and at least two respective display interfaces, the step of reconstruction including displaying said extracted data on one of said at least two displays and displaying said remainder data on another of said at least two displays.

29. A method as claimed in claim 16 including deleting said data input from said data input computer after the step of storing.

30. A method as claimed in claim 16 including mapping said remainder store and said plurality of extract stores.

31. A method for securing data in a computer network having a plurality of computers interconnected together, one of said plurality of computers designated as a data input computer, each of said plurality of computers having a memory therein, said plurality of computers including a plurality of first designated computers each with a corresponding security level and security clearance and a second designated computer, comprising:

establishing a group of security sensitive words, characters or icons for each said security level;

filtering data input from said data input computer and extracting said security sensitive words, characters or icons for each respective security level from said data to obtain extracted data for the respective security level and remainder data;

designating corresponding memory in said first designated computers as an extract store for each said respective security level and designating memory in said second computer as a remainder store;

storing said extracted data in said corresponding memory for each said respective security level and said remainder data in said remainder store; and

,

accessing respective corresponding memories and permitting full or partial reconstruction of said data via said extracted data and remainder data only in the presence of a respective security clearance corresponding to the respective security level.

32. A method as claimed in claim 31 wherein said step of designating includes storing a map of the corresponding memory.

33. A method as claimed in claim 32 including storing said map in said data input computer.

34. A method as claimed in claim 33 wherein the step of storing said map includes encrypting said map and the step of permitting reconstruction includes the step of decrypting said map.

35. A method as claimed in claim 31 wherein said second computer is said data input computer and the step of filtering occurs thereat.

36. A method as claimed in claim 31 including the step of encrypting one or both of said extracted data and remainder data.

37. A method as claimed in claim 36 including the step of encrypting during the filtering step and prior to the storing step.

38. A method as claimed in claim 37 including the step of decrypting during the reconstruction step.

39. A method as claimed in claim 31 including creating at least one filter for a respective security level and one of destroying or storing said filter after the filtering step.

40. A method as claimed in claim 31 wherein one of said computers includes a display fed from video memory having a plurality of frame memory segments, the reconstruction step including interleaving extracted data and remainder data into respective ones of said plurality of frame memory segments on said one computer.

41. A method as claimed in claim 31 wherein one of said computers includes a data display system with at least two separate but visually overlaid displays and at least two respective display interfaces, the step of reconstruction including displaying said extracted data on one of said at least two displays and displaying said remainder data on another of said at least two displays on said one computer.

42. A method as claimed in claim 31 including deleting said data input from said data input computer after the step of storing.

43. A method for securing data in a computer network with one or more security sensitive words, characters or icons and a plurality of security levels each with a respective security clearance, subsets of said security sensitive words, characters or icons being correlated with respective ones of said plurality of security levels, said computer network having a plurality of computers interconnected together, each of said plurality of computers having a memory therein, one of said plurality of computers designated as a data input computer, said plurality of computers including a first computer designated as a remainder store and a further plurality of computers designated as extract stores for respective ones of said plurality of security levels, comprising:

extracting said security sensitive words, characters or icons for said plurality of security levels from said data to obtain extracted data for respective security levels and remainder data;

storing said extracted data in extract stores corresponding to respective security levels and said remainder data in said remainder store;

presenting a plurality of predetermined security clearances to obtain access to respective ones of said extract stores; and

,

permitting full or partial reconstruction of said data via said extracted data and remainder data only in the presence of respective ones of said predetermined security clearances after presentment thereof.

44. A method as claimed in claim 43 including designating a map of the extract stores and said remainder store.

45. A method as claimed in claim 44 including storing said map in said data input computer.

46. A method as claimed in claim 45 wherein the step of storing said map includes encrypting said map and the step of permitting reconstruction includes the step of decrypting said map.

47. A method as claimed in claim 43 wherein said data input computer filters the extracted data.

48. A method as claimed in claim 43 including the step of encrypting one or both of said extracted data and remainder data.

49. A method as claimed in claim 48 including the step of encrypting prior to the storing step.

50. A method as claimed in claim 49 including the step of decrypting during the reconstruction step.

51. A method as claimed in claim 47 including employing a filter for said extracting step and one of destroying or storing said filter after the filtering step.

52. A method as claimed in claim 43 wherein one of said computers includes a display fed from video memory having a plurality of frame memory segments, the reconstruction step including interleaving extracted data and remainder data into respective ones of said plurality of frame memory segments on said one computer.

53. A method as claimed in claim 43 wherein one of said computers includes a data display system with at least two separate but visually overlaid displays and at least two respective display interfaces, the step of reconstruction including displaying said extracted data on one of said at least two displays and displaying said remainder data on another of said at least two displays on said one computer.

54. A method as claimed in claim 43 including deleting said data input from said data input computer after the step of storing.

55. A computer readable medium containing programming instructions for securing data in a computer network having a plurality of computers interconnected together, one of said plurality of computers designated as a data input computer and each of said plurality of computers having a memory therein, a plurality of memories respectively designated as a remainder store and a plurality of extract stores in other computers in said plurality of computers, the programming instructions comprising:

establishing a group of security sensitive words, characters or icons for each of a plurality of security levels, each level having a respective security clearance;

filtering data input from said data input computer and extracting said security sensitive words, characters or icons for a respective security level from said data to obtain extracted data and remainder data;

storing said extracted data in extract stores corresponding to respective security levels and said remainder data in said remainder store; and

,

accessing respective extract stores and permitting full or partial reconstruction of said data via said extracted data and remainder data only in the presence of a respective security clearance corresponding to the respective security level.

56. A medium with programming instructions as claimed in claim 55 including the step of permitting a plurality of partial reconstructions of said data in the presence of respective ones of said plurality of security clearance levels.

57. A medium with programming instructions as claimed in claim 55 including encrypting one or both of said extracted data and remainder data.

58. A medium with programming instructions as claimed in claim 57 including encrypting during the filtering step and prior to the storing step.

59. A medium with programming instructions as claimed in claim 58 including decrypting during the reconstruction step.

60. A medium with programming instructions as claimed in claim 55 including employing a filter for the respective security level and one of destroying or storing said filter after the filtering step.

61. A medium with programming instructions as claimed in claim 55 including deleting said data input from said data input computer after the step of storing.

62. A medium with programming instructions as claimed in claim 55 including mapping said said plurality of memories.

63. An information processing system for securing data having one or more security sensitive words, characters or icons in a computer network, a plurality of security levels each with a respective security clearance, subsets of said security sensitive words, characters or icons being correlated with respective ones of said plurality of security levels, said computer network having a plurality of computers interconnected together, each of said plurality of computers having a memory therein, one of said plurality of computers designated as a data input computer, said plurality of computers including a first computer designated as a remainder computer store and a plurality of other computers designated as extract stores for respective ones of said plurality of security levels, the information processing system comprising:

a filter adapted to receive data input from said data input computer and to separate, from said data input, said security sensitive words, characters or icons into extracted data corresponding to respective ones of said plurality of security levels and remainder data;

a memory storage facility, coupled to said filter, for storing said extracted data in corresponding extract stores and said remainder data in said remainder store;

a security clearance control for each of said extract stores controlling access thereto only in the presence of a predetermined respective one of a plurality of security clearances for each of said plurality of security levels; and

a compiler, coupled to said security control and said extract stores and said remainder store, for fully or partially reconstructing said data from said extracted data and said remainder data dependent upon access provided by respective ones of said plurality of security clearances.

64. An information processing system as claimed in claim 63 including means for mapping said extract stores and said remainder store, coupled to said memory storage facility.

65. An information processing system as claimed in claim 64 wherein said means for mapping creates a map for said corresponding extract stores.

66. An information processing system as claimed in claim 65 including an encryptor coupled to said filter for encrypting said map and a decryptor coupled to said compiler for decrypting said map.

67. An information processing system as claimed in claim 63 wherein said filter is adapted to be removably coupled to said data input computer.

68. An information processing system as claimed in claim 63 including an encryptor coupled to said filter for encrypting one or both of said extracted data and remainder data.

69. An information processing system as claimed in claim 68 including a decryptor coupled to said compiler for decrypting one or both of said extracted data and remainder data.

70. An information processing system as claimed in claim 63 including means for deleting said filter, coupled to said filter.

71. An information processing system as claimed in claim 63 wherein one of said computers includes a display fed from a video memory having a plurality of frame memory segments, the information processing system including said compiler adapted to be coupled to said video memory, said compiler having means for interleaving extracted data and remainder data into respective ones of said plurality of frame memory segments on said one computer.

72. An information processing system as claimed in claim 63 wherein one of said computers includes a data display system with at least two separate but visually overlaid displays and at least two respective display interfaces, the information processing system including said compiler adapted to be coupled to said at least two display interfaces, said compiler having means for displaying said extracted data on one of said at least two displays and displaying said remainder data on another of said at least two displays on said one computer.

73. An information processing system as claimed in claim 63 including means for deleting said data input from said data input computer.