Transparent Control of Access Invoking Real-time Analysis of the Query History

A system for controlling access of one or more inquirers to a repository for use in a supply chain, a product tracking system, a medical care environment or a power grid, the repository storing data, preferably sensitive business data pertaining to one or more supply chains, event data pertaining to one or more traceable products, medical data pertaining to one or more patients, or measurement data pertaining to one or more measurements, the system comprising:

• an access control server (ACS) connected to the repository via a link and adapted to receive from an access control client (ACC) a query submitted by an individual inquirer of a plurality of inquirers regarding a set of data,
• the access control server (ACS) further adapted to request and receive a result set (Rsp R) from the repository corresponding to the query, and
• the access control server (ACS) is further adapted to transmit an encrypted result set (Rsp R) to the access control client (ACC),
• even further adapted to receive a request for permission to view the result set (Rsp R) from the access control client (ACC),
• and adapted to generate a permission in response to the request for permission.

A communication protocol between a client and a server connected via a link to a repository for use in a supply chain, a product tracking system, a medical care environment or a power grid;

• the repository storing data, preferably sensitive business data pertaining to one or more supply chains, event data pertaining to one or more traceable products, medical data pertaining to one or more patients, or measurement data pertaining to one or more measurements;
• the communication protocol comprising the steps of:
• receiving (200) at the server a query from the client regarding a set of data from the repository,
• transmitting (500) an encrypted result set (Rsp R) from the server to the client corresponding to the query,
• receiving (600) at the server a request for permission to view the result set (Rsp R) from the client, and
• forwarding (715) a key for decrypting the encrypted result set (Rsp R) and a permission to view the result set (Rsp R) from the server to the client.