Data security system and method

• US 7,721,344 B2
• Filed: 08/17/2006
• Issued: 05/18/2010
• Est. Priority Date: 11/13/2000
• Status: Expired due to Term

• Current Assignee: DigitalDoors, Inc.
• Original Assignee: DigitalDoors, Inc.
• Inventors: Redlich, Ron M., Nemzow, Martin A.
• Primary Examiner(s): PYZOCHA, MICHAEL J
• Application Number:
  US11/465,350
• Publication Number:
  US 20070006326A1
• Time in Patent Office: 1,370 Days
• Field of Search: 726/27, 713/166, 713/193, 715/255
• US Class Current: 726/27
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2221/2147 Locking files

Abstract

The method for securing data in a server-client computer system for security sensitive content includes extracting sensitive content and separating the security sensitive content from remainder data. The security sensitive content is grouped into security levels, each with a security clearance. The extracted data, for each security level, is remotely stored in extract stores. A map of storage sites may be generated. The filter and/or map may be destroyed or stored. The data input, extracted data and remainder data may be deleted from the originating computer. Encryption may be utilized to enhance security (including transfers of data, filter and map). Full or partial reconstruction of the data is permitted only in the presence of predetermined security clearances. The extraction and storage can be done on the input client computer or the web-based server. A computer readable medium containing programming instructions and an information processing system is encompassed.

Claims

1. A method of securing data having security sensitive content represented by one or more security sensitive words, characters, images or data objects therein, said security sensitive content having a plurality of security levels, each security level having an associated security clearance, the method of securing data deployed in a client-server computer system with at least one server computer and a plurality of extract data stores for respective ones of said plurality of security levels, said server operatively coupled to at least one client computer and said extract data stores over a communications network comprising:

accepting data input which includes security sensitive content via said client computer;

extracting said security sensitive content to obtain extracted data for each corresponding security level and remainder data;

storing said extracted data for each corresponding security level in the respective extract store and storing said remainder data in at least one of said client computer and server computer; and

,

permitting full or partial reconstruction of said data with corresponding extracted data and remainder data after accessing said respective extract stores for corresponding security levels with said associated security clearances.

2. A method as claimed in claim 1 wherein accepting occurs at one of said client computer and said server computer.

3. A method as claimed in claim 1 wherein extracting occurs at one of said client computer and said server computer.

4. A method as claimed in claim 1 wherein one or both of extracting and storing occurs at said server computer.

5. A method as claimed in claim 1 wherein storing of said remainder data occurs at one of said server computer, said client computer and a remainder data store in said client-server computer system.

6. A method as claimed in claim 1 wherein storing or extraction occurs with encryption corresponding to said respective ones of said plurality of security levels.

7. A method as claimed in claim 6 wherein accepting or storing or permitting reconstruction occurs with decryption corresponding to said respective ones of said plurality of security levels.

8. A method as claimed in claim 1 wherein permitting full or partial reconstruction of said data occurs at one of said client computer and said server computer.

9. A method as claimed in claim 1 wherein said client-server computer system includes at least first and second client computers, said first client computer being said at least one client computer, and wherein accepting data input occurs at said first client computer and permitting full or partial reconstruction of said data occurs at said second client computer.

10. A method as claimed in claim 9 wherein extracting occurs at one of said first client computer and said server computer.

11. A method as claimed in claim 10 wherein storing or extraction occurs with encryption corresponding to said respective ones of said plurality of security levels.

12. A method as claimed in claim 10 wherein accepting or storing or permitting reconstruction occurs with decryption corresponding to said respective ones of said plurality of security levels.

13. A method as claimed in claim 1 wherein extract data stores are remotely disposed, via said communications network, with respect to said server computer and wherein storing said extracted data employs said server computer to store the respective extracted data into said corresponding extract stores.

14. A method as claimed in claim 13 wherein storing or extraction occurs with encryption corresponding to said respective ones of said plurality of security levels.

15. A method as claimed in claim 14 wherein accepting or storing or permitting reconstruction occurs with decryption corresponding to said respective ones of said plurality of security levels.

16. A method as claimed in claim 1 wherein storing of said remainder data occurs at one of said server computer and said client computer.

17. A method as claimed in claim 1 wherein storing of said remainder data occurs at said client computer on one of a fixed memory and a removable memory at said client computer.

18. A method as claimed in claim 16 wherein storing of said remainder data occurs at one of said server computer and a remainder store remotely disposed via said communications network with respect to said server computer.

19. A method as claimed in claim 1 including storing a map or locating data for said respective extract stores.

20. A method as claimed in claim 19 wherein the storing of said map or locating data occurs at one of said client computer and said server computer.

21. A method as claimed in claim 20 wherein the storing of said map or locating data occurs at said client computer in one of a fixed memory and a removable memory at said client computer.

22. A method as claimed in claim 20 wherein the storing of said map or locating data via said server computer in one of a server memory store and a remote memory map store, remotely disposed over said communications network with respect to said server computer.

23. A method as claimed in claim 19 including encrypting at least one of said extracted data prior to storage, said remainder data prior to storage, and said map prior to storage.

24. A method as claimed in claim 23 including decrypting said at least one of said extracted data prior to reconstruction, said remainder data prior to reconstruction, and said map prior to reconstruction.

25. A method as claimed in claim 24 wherein storing of said remainder data occurs at one of said server computer and a remainder store remotely disposed via said communications network with respect to said server computer and said map locates said remainder store.

26. A method as claimed in claim 1 including establishing a plurality of filters for groups of security sensitive content corresponding to respective ones of said plurality of security levels and using said filter during the extraction of security sensitive content.

27. A method as claimed in claim 26 including storing said plurality of filters on one of said client computer and said server computer in one of fixed memory and removable memory.

28. A method as claimed in claim 27 including encrypting and decrypting said plurality of filters for respective ones of said plurality of security levels.

29. A method as claimed in claim 27 including one of destroying or storing the filter after extraction.

30. A method as claimed in claim 2 including

establishing a plurality of filters corresponding to groups of security sensitive content for respective ones of said plurality of security levels and using a respective filter during the extraction of security sensitive content for said each corresponding security level;

storing said plurality of filters on one of said client computer and said server computer, dependent upon accepting at one of said client computer and said server computer, in one of fixed memory and removable memory;

encrypting and decrypting said plurality of filters for respective ones of said plurality of security levels; and

one of destroying or storing the filter after extraction.

31. A method as claimed in claim 3 including

establishing a plurality of filters corresponding to groups of security sensitive content for respective ones of said plurality of security levels and using a respective filter during the extraction of security sensitive content for said each corresponding security level;

storing said plurality of filters on one of said client computer and said server computer, dependent upon extracting at one of said client computer and said server computer, in one of fixed memory and removable memory;

encrypting and decrypting said plurality of filters for respective ones of said plurality of security levels; and

one of destroying or storing the filter after extraction.

32. A method as claimed in claim 4 including

establishing a plurality of filters corresponding to groups of security sensitive content for respective ones of said plurality of security levels and using a respective filter during the extraction of security sensitive content for said each corresponding security level;

storing said plurality of filters on said server computer in one of fixed memory and removable memory;

encrypting and decrypting said plurality of filters for respective ones of said plurality of security levels; and

one of destroying or storing the filter after extraction.

33. A method as claimed in claim 26 wherein said filters identify either by inclusion or exclusion said security sensitive content.

34. A method as claimed in claim 1 including deleting said data input after storing.

35. A method as claimed in claim 24 including deleting said map after full reconstruction.

36. A method as claimed in claim 1 wherein said client-server computer system includes an output client computer having a display fed from video memory having a plurality of frame memory segments, the reconstruction including interleaving extracted data and remainder data into respective ones of said plurality of frame memory segments of said output client computer.

37. A method as claimed in claim 1 wherein said client-server computer system includes an output client computer having a data display system with at least two separate but visually overlaid displays and at least two respective display interfaces, the reconstruction including displaying said extracted data on one of said at least two displays and displaying said remainder data on another of said at least two displays of said output client computer.

38. A method as claimed in claim 1 wherein extracting occurs at said client computer either automatically or manually with operator input.

39. A method of securing data having security sensitive content represented by one or more security sensitive words, characters, images or data objects therein, said security sensitive content having a plurality of security levels, each security level having an associated security clearance, the method of securing data deployed in a client-server computer system with at least one server computer and a plurality of extract data stores for respective ones of said plurality of security levels, said server operatively coupled to at least one client computer and said extract data stores over a communications network comprising:

from input data, extracting said security sensitive content to obtain extracted data for each corresponding security level and remainder data;

separately storing said extracted data, for each corresponding security level, in the respective extract store, apart from said remainder data stored in one or both of said client computer and server computer; and

,

permitting full or partial reconstruction of said data with corresponding extracted data and remainder data after accessing said respective extract stores for corresponding security levels with said associated security clearances.

40. A method as claimed in claim 39 wherein extracting occurs at one of said client computer and said server computer.

41. A method as claimed in claim 39 wherein one or both of extracting and storing occurs at said server computer.

42. A method as claimed in claim 39 wherein extracting includes filtering security sensitive content at one of said client computer and said server computer.

43. A method as claimed in claim 39 wherein said server computer stores said remainder data thereat or in remotely disposed remainder stores in said client-server computer system.

44. A method as claimed in claim 43 including storing a map of said respective extract stores.

45. A method as claimed in claim 44 including encrypting at least one of said extracted data prior to storage, said remainder data prior to storage, and said map prior to storage.

46. A method as claimed in claim 45 wherein said map is stored on one of said client computer and said server computer.

47. A method as claimed in claim 46 including the step of decrypting said at least one of said extracted data prior to reconstruction, said remainder data prior to reconstruction, and said map prior to reconstruction.

48. A method as claimed in claim 39 wherein said computer system includes an output client computer having a display fed from video memory having a plurality of frame memory segments, the reconstruction including interleaving extracted data and remainder data into respective ones of said plurality of frame memory segments of said output client computer.

49. A method as claimed in claim 39 wherein said computer system includes an output client computer having a data display system with at least two separate but visually overlaid displays and at least two respective display interfaces, the reconstruction including displaying said extracted data on one of said at least two displays and displaying said remainder data on another of said at least two displays of said output client computer.

50. A method as claimed in claim 39 including deleting said input data after storing.

51. A method as claimed in claim 39 including mapping the storage of said extracted data and said remainder data in one or both of said client computer and said server computer.

52. A method of securing data having security sensitive content represented by one or more security sensitive words, characters, images or data objects therein, said security sensitive content having a plurality of security levels, each security level having an associated security clearance, the method of securing data deployed in a client-server computer system with at least one server computer and a plurality of extract data stores for respective ones of said plurality of security levels and a remainder data store, said server operatively coupled to at least one client computer and said extract data stores over a communications network comprising:

extracting security sensitive content from a data input via said server computer to obtain extracted data for each corresponding security level and remainder data;

storing said extracted data for each corresponding security level in the respective extract store and storing said remainder data in said remainder data store; and

,

permitting full or partial reconstruction of said data with corresponding extracted data and remainder data after accessing said respective extract stores for corresponding security levels with said associated security clearances.

53. A method as claimed in claim 52 wherein said reconstruction is a download operation adapted to be directed at said client computer.

54. A method as claimed in claim 53 wherein said client-server computer system includes first and second client computers, said extracting is part of an upload operation adapted to be associated with said first client computer and said download reconstruction is adapted to be directed at said second client computer.

55. A method as claimed in claim 52 wherein said remainder data store is either included in said server computer or is disposed as a separate remainder memory store operatively coupled over said communications network.

56. A method as claimed in claim 52 wherein said client-server computer system includes first and second client computers, said remainder data store is part of said first client computer and the storing of remainder data includes a store download operation adapted to be directed at said first client computer.

57. A method as claimed in claim 56 said extracting is part of an upload operation adapted to be associated with said first client computer and said download reconstruction is adapted to be directed at said second client computer.

58. A method as claimed in claim 52 wherein storing or extraction occurs with encryption corresponding to said respective ones of said plurality of security levels.

59. A method as claimed in claim 58 wherein storing or reconstruction occurs with decryption corresponding to said respective ones of said plurality of security levels.

60. A method as claimed in claim 52 wherein extract data stores are remotely disposed, via said communications network, with respect to said server computer and wherein storing said extracted data employs said server computer to store the respective extracted data into said corresponding extract stores.

61. A method as claimed in claim 60 wherein storing or extraction occurs with encryption corresponding to said respective ones of said plurality of security levels.

62. A method as claimed in claim 61 wherein reconstruction occurs with decryption corresponding to said respective ones of said plurality of security levels.

63. A method as claimed in claim 52 wherein storing of said remainder data occurs upon server instruction adapted to be directed at said client computer on one of a fixed memory and a removable memory at said client computer.

64. A method as claimed in claim 60 wherein storing of said remainder data occurs at one of said server computer and a remainder store remotely disposed via said communications network with respect to said server computer.

65. A method as claimed in claim 52 including storing a map or locating data for said respective extract stores.

66. A method as claimed in claim 65 wherein the storing of said map or locating data occurs at one of a map store and said server computer.

67. A method as claimed in claim 66 wherein the storing of said map or locating data occurs via said server computer in one of a server memory store and a remote memory map store, remotely disposed over said communications network with respect to said server computer.

68. A method as claimed in claim 65 including encrypting at least one of said extracted data prior to storage, said remainder data prior to storage, and said map prior to storage.

69. A method as claimed in claim 68 including decrypting said at least one of said extracted data prior to reconstruction, said remainder data prior to reconstruction, and said map prior to reconstruction.

70. A method as claimed in claim 52 wherein a plurality of filters are provided for groups of security sensitive content corresponding to respective ones of said plurality of security levels, downloading, from said server computer, one or more of said filters to facilitate extraction of security sensitive content.

71. A method as claimed in claim 70 including storing said plurality of filters on said server computer in one of fixed memory and removable memory.

72. A method as claimed in claim 71 including encrypting and decrypting said plurality of filters for respective ones of said plurality of security levels.

73. A method as claimed in claim 71 including one of destroying or storing the filter after extraction.

74. A method as claimed in claim 54 including

establishing a plurality of filters corresponding to groups of security sensitive content for respective ones of said plurality of security levels and downloading, from said server computer, a respective filter to facilitate extraction of security sensitive content for said each corresponding security level;

encrypting and decrypting said plurality of filters for respective ones of said plurality of security levels; and

one of instructing the destruction or storage of the respective filter after extraction.

75. A method as claimed in claim 55 including

establishing a plurality of filters corresponding to groups of security sensitive content for respective ones of said plurality of security levels and downloading, from said server computer, a respective filter to facilitate extraction of security sensitive content for said each corresponding security level;

encrypting and decrypting said plurality of filters for respective ones of said plurality of security levels; and

one of instructing the destruction or storage of the respective filter after extraction.

76. A method as claimed in claim 70 wherein said filters identify either by inclusion or exclusion said security sensitive content.

77. A method as claimed in claim 52 including deleting said data input after storing.

78. A method as claimed in claim 69 including deleting said map after full reconstruction.

79. A method of securing data having security sensitive content represented by one or more security sensitive words, characters, images or data objects therein, said security sensitive content having a plurality of security levels, each security level having an associated security clearance, the method of securing data deployed in a client-server computer system with at least one server computer and a plurality of extract data stores for respective ones of said plurality of security levels and a remainder data store, said server operatively coupled to at least one client computer and said extract data stores over a communications network comprising:

facilitating the extraction of security sensitive content from a data input to obtain extracted data for each corresponding security level and remainder data;

at said server computer, storing said extracted data for each corresponding security level in the respective extract store and storing said remainder data in said remainder data store; and

,

permitting full or partial reconstruction of said data with corresponding extracted data and remainder data after accessing said respective extract stores for corresponding security levels with said associated security clearances.

80. A method as claimed in claim 79 wherein said reconstruction is a download operation adapted to be directed at said client computer.

81. A method as claimed in claim 80 wherein said client-server computer system includes first and second client computers, said facilitating the extraction is part of an upload operation adapted to be associated with said first client computer and said download reconstruction is adapted to be directed at said second client computer.

82. A method as claimed in claim 79 wherein said remainder data store is either included in said server computer or is disposed as a separate remainder memory store operatively coupled over said communications network.

83. A method as claimed in claim 79 wherein said client-server computer system includes first and second client computers, said remainder data store is part of said first client computer and the storing of remainder data includes a store download operation adapted to be directed at said first client computer.

84. A method as claimed in claim 83 said facilitating the extraction is part of an upload operation adapted to be associated with said first client computer and said download reconstruction is adapted to be directed at said second client computer.

85. A method as claimed in claim 79 wherein storing or said facilitating the extraction occurs with encryption corresponding to said respective ones of said plurality of security levels.

86. A method as claimed in claim 85 wherein storing or reconstruction occurs with decryption corresponding to said respective ones of said plurality of security levels.

87. A method as claimed in claim 79 wherein extract data stores are remotely disposed, via said communications network, with respect to said server computer and wherein storing said extracted data employs said server computer to store the respective extracted data into said corresponding extract stores.

88. A method as claimed in claim 87 wherein storing or said facilitating the extraction occurs with encryption corresponding to said respective ones of said plurality of security levels.

89. A method as claimed in claim 88 wherein reconstruction occurs with decryption corresponding to said respective ones of said plurality of security levels.

90. A method as claimed in claim 79 wherein storing of said remainder data occurs upon server instruction adapted to be directed at said client computer on one of a fixed memory and a removable memory at said client computer.

91. A method as claimed in claim 79 wherein storing of said remainder data occurs at one of said server computer and a remainder store remotely disposed via said communications network with respect to said server computer.

92. A method as claimed in claim 79 including storing a map or locating data for said respective extract stores.

93. A method as claimed in claim 92 wherein the storing of said map or locating data occurs at one of a map store and said server computer.

94. A method as claimed in claim 93 wherein the storing of said map or locating data occurs via said server computer in one of a server memory store and a remote memory map store, remotely disposed over said communications network with respect to said server computer.

95. A method as claimed in claim 94 including encrypting at least one of said extracted data prior to storage, said remainder data prior to storage, and said map prior to storage.

96. A method as claimed in claim 95 including decrypting said at least one of said extracted data prior to reconstruction, said remainder data prior to reconstruction, and said map prior to reconstruction.

97. A method as claimed in claim 92 wherein a plurality of filters are provided for groups of security sensitive content corresponding to respective ones of said plurality of security levels, downloading, from said server computer, one or more of said filters to facilitate extraction of security sensitive content.

98. A method as claimed in claim 97 including storing said plurality of filters on said server computer in one of fixed memory and removable memory.

99. A method as claimed in claim 98 including encrypting and decrypting said plurality of filters for respective ones of said plurality of security levels.

100. A method as claimed in claim 98 including one of destroying or storing the filter after extraction.

101. A method as claimed in claim 81 including

establishing a plurality of filters corresponding to groups of security sensitive content for respective ones of said plurality of security levels and downloading, from said server computer, a respective filter to facilitate extraction of security sensitive content for said each corresponding security level;

encrypting and decrypting said plurality of filters for respective ones of said plurality of security levels; and

one of instructing the destruction or storage of the respective filter after extraction.

102. A method as claimed in claim 82 including

establishing a plurality of filters corresponding to groups of security sensitive content for respective ones of said plurality of security levels and downloading, from said server computer, a respective filter to facilitate extraction of security sensitive content for said each corresponding security level;

encrypting and decrypting said plurality of filters for respective ones of said plurality of security levels; and

one of instructing the destruction or storage of the respective filter after extraction.

103. A method as claimed in claim 97 wherein said filters identify either by inclusion or exclusion said security sensitive content.

104. A method as claimed in claim 79 including deleting said data input after storing.

105. A method as claimed in claim 96 including deleting said map after full reconstruction.

106. A computer readable storage medium containing programming instructions for securing data having security sensitive content represented by one or more security sensitive words, characters, images or data objects therein, said security sensitive content having a plurality of security levels, each security level having an associated security clearance, the method of securing data deployed in a client-server computer system with at least one server computer and a plurality of extract data stores for respective ones of said plurality of security levels, said server operatively coupled to at least one client computer and said extract data stores over a communications network, the programming instructions comprising:

accepting data input which includes security sensitive content via said client computer;

extracting said security sensitive content to obtain extracted data for each corresponding security level and remainder data;

storing said extracted data for each corresponding security level in the respective extract store and storing said remainder data in at least one of said client computer and server computer; and

,

permitting full or partial reconstruction of said data with corresponding extracted data and remainder data after accessing said respective extract stores for corresponding security levels with said associated security clearances.

107. A computer readable storage medium containing programming instructions as claimed in claim 106 wherein storing of said remainder data occurs at one of said server computer, said client computer and a remainder data store in said client-server computer system.

108. A computer readable storage medium containing programming instructions as claimed in claim 106 wherein storing or extraction occurs with encryption corresponding to said respective ones of said plurality of security levels.

109. A computer readable storage medium containing programming instructions as claimed in claim 108 wherein accepting or storing or permitting reconstruction occurs with decryption corresponding to said respective ones of said plurality of security levels.

110. A computer readable storage medium containing programming instructions as claimed in claim 106 wherein extract data stores are remotely disposed, via said communications network, with respect to said server computer and wherein storing said extracted data employs said server computer to store the respective extracted data into said corresponding extract stores.

111. A computer readable storage medium containing programming instructions as claimed in claim 110 wherein storing or extraction occurs with encryption corresponding to said respective ones of said plurality of security levels.

112. A computer readable storage medium containing programming instructions as claimed in claim 111 wherein accepting or storing or permitting reconstruction occurs with decryption corresponding to said respective ones of said plurality of security levels.

113. A computer readable storage medium containing programming instructions as claimed in claim 106 wherein storing of said remainder data occurs at one of said server computer and said client computer.

114. A computer readable storage medium containing programming instructions as claimed in claim 106 wherein storing of said remainder data occurs at said client computer on one of a fixed memory and a removable memory at said client computer.

115. A computer readable storage medium containing programming instructions as claimed in claim 113 wherein storing of said remainder data occurs at one of said server computer and a remainder store remotely disposed via said communications network with respect to said server computer.

116. A computer readable storage medium containing programming instructions as claimed in claim 106 including storing a map or locating data for said respective extract stores.

117. A computer readable storage medium containing programming instructions as claimed in claim 116 wherein the storing of said map or locating data occurs at one of said client computer and said server computer.

118. A computer readable storage medium containing programming instructions as claimed in claim 117 wherein the storing of said map or locating data occurs at said client computer in one of a fixed memory and a removable memory at said client computer.

119. A computer readable storage medium containing programming instructions as claimed in claim 117 wherein the storing of said map or locating data via said server computer in one of a server memory store and a remote memory map store, remotely disposed over said communications network with respect to said server computer.

120. A computer readable storage medium containing programming instructions as claimed in claim 116 including encrypting at least one of said extracted data prior to storage, said remainder data prior to storage, and said map prior to storage.

121. A computer readable storage medium containing programming instructions as claimed in claim 120 including decrypting said at least one of said extracted data prior to reconstruction, said remainder data prior to reconstruction, and said map prior to reconstruction.

122. A computer readable storage medium containing programming instructions as claimed in claim 121 wherein storing of said remainder data occurs at one of said server computer and a remainder store remotely disposed via said communications network with respect to said server computer and said map locates said remainder store.

123. A computer readable storage medium containing programming instructions as claimed in claim 106 including establishing a plurality of filters for groups of security sensitive content corresponding to respective ones of said plurality of security levels and using said filter during the extraction of security sensitive content.

124. A computer readable storage medium containing programming instructions as claimed in claim 123 including storing said plurality of filters on one of said client computer and said server computer in one of fixed memory and removable memory.

125. A computer readable storage medium containing programming instructions as claimed in claim 124 including encrypting and decrypting said plurality of filters for respective ones of said plurality of security levels.

126. A computer readable storage medium containing programming instructions as claimed in claim 124 including one of destroying or storing the filter after extraction.

127. A computer readable storage medium containing programming instructions as claimed in claim 106 including

establishing a plurality of filters corresponding to groups of security sensitive content for respective ones of said plurality of security levels and using a respective filter during the extraction of security sensitive content for said each corresponding security level;

storing said plurality of filters on one of said client computer and said server computer, dependent upon accepting at one of said client computer and said server computer, in one of fixed memory and removable memory;

encrypting and decrypting said plurality of filters for respective ones of said plurality of security levels; and

one of destroying or storing the filter after extraction.

128. A computer readable storage medium containing programming instructions as claimed in claim 106 including

establishing a plurality of filters corresponding to groups of security sensitive content for respective ones of said plurality of security levels and using a respective filter during the extraction of security sensitive content for said each corresponding security level;

storing said plurality of filters on one of said client computer and said server computer, dependent upon extracting at one of said client computer and said server computer, in one of fixed memory and removable memory;

encrypting and decrypting said plurality of filters for respective ones of said plurality of security levels; and

one of destroying or storing the filter after extraction.

129. A computer readable storage medium containing programming instructions as claimed in claim 108 including

establishing a plurality of filters corresponding to groups of security sensitive content for respective ones of said plurality of security levels and using a respective filter during the extraction of security sensitive content for said each corresponding security level;

storing said plurality of filters on said server computer in one of fixed memory and removable memory;

encrypting and decrypting said plurality of filters for respective ones of said plurality of security levels; and

one of destroying or storing the filter after extraction.

130. A computer readable storage medium containing programming instructions as claimed in claim 123 wherein said filters identify either by inclusion or exclusion said security sensitive content.

131. A computer readable storage medium containing programming instructions as claimed in claim 106 including deleting said data input after storing.

132. A computer readable storage medium containing programming instructions as claimed in claim 121 including deleting said map after full reconstruction.

133. An information processing system for securing data having security sensitive content represented by one or more security sensitive words, characters, images or data objects therein, said security sensitive content having a plurality of security levels, each security level having an associated security clearance, information processing system deployed in a client-server computer system with at least one server computer and a plurality of extract data stores for respective ones of said plurality of security levels, said server operatively coupled to at least one client computer and said extract data stores over a communications network comprising:

a filter adapted to receive a data input from said communications network and to separate, from said data input, said security sensitive content as extracted data for each corresponding security level, leaving remainder data;

means for storing said extracted data for each corresponding security level in the respective extract store and storing said remainder data in at least one of said client computer and server computer;

an access controller for permitting access to said respective extract stores for corresponding security levels with said associated security clearances; and

,

a compiler, coupled to said access controller, for permitting full or partial reconstruction of said data via said respective extract stores and remainder data based upon said corresponding security levels and associated security clearances.

134. An information processing system as claimed in claim 133 wherein said filter is on one of said client computer and said server computer.

135. An information processing system as claimed in claim 133 wherein server computer has a downloader and said filter is downloaded to said client computer.

136. An information processing system as claimed in claim 133 wherein said means for storing is on said server computer.

137. An information processing system as claimed in claim 133 wherein said server computer includes a remainder store and said means for storing operates on said remainder data at said server computer.

138. An information processing system as claimed in claim 133 wherein said client computer includes a remainder store and said means for storing operates on said remainder data at said client computer.

139. An information processing system as claimed in claim 133 including an encryptor coupled to said means for storing enabling encryption for said extracted data corresponding to said respective ones of said plurality of security levels.

140. An information processing system as claimed in claim 139 including a decryptor coupled to said compiler, for decryption during reconstruction, said decryption corresponding to said respective ones of said plurality of security levels.

141. An information processing system as claimed in claim 133 wherein extract data stores are remotely disposed, via said communications network, with respect to said server computer and wherein said means for storing said extracted data employs said server computer to store the respective extracted data into said corresponding extract stores.

142. An information processing system as claimed in claim 141 including an encryptor coupled to said means for storing enabling encryption for said extracted data corresponding to said respective ones of said plurality of security levels.

143. An information processing system as claimed in claim 142 including a decryptor coupled to said compiler, for decryption during reconstruction, said decryption corresponding to said respective ones of said plurality of security levels.

144. An information processing system as claimed in claim 133 wherein means for storing directs storage of said remainder data at said client computer on one of a fixed memory and a removable memory at said client computer.

145. An information processing system as claimed in claim 133 wherein means for storing directs storage of said remainder data at one of said server computer and a remainder store remotely disposed via said communications network with respect to said server computer.