System and method for access data control

A method for distributing data to a user comprising the steps of:

• providing encrypted data on a data storage unit, an access code being required to decrypt said encrypted data to provide access to the encrypted data, wherein at least a portion of said encrypted data is correlated with a corresponding access code identifier for identifying access codes, and wherein update instructions and an update counter value are stored on the data storage unit, the instructions and counter value enabling a controller to use said transmitted access code to generate an updated access code for enabling access to previously inaccessible parts of said encrypted data on said data storage unit;
• at a remote location, storing a plurality of access codes together with corresponding access code identifiers;
• at the remote location, generating an authorization signal when predetermined conditions are met, wherein said authorization signal causes one of said access codes to be transmitted to said user to enable said user to access a portion of said encrypted data by decrypting a portion of said encrypted data and wherein said predetermined conditions include the receipt of one of said access code identifiers from said user;
• applying said access code to said encrypted data to decrypt a portion of said encrypted data;
• and
• processing said decrypted portion of said encrypted data.

A method of distributing information in the form of data sets and providing access thereto, comprising the steps of:

• encrypting said data sets so that different access codes are required to decrypt different portions of said data sets;
• correlating said data sets with access code identifiers which identify particular access codes which will decrypt said data sets;
• storing said data sets in a data storage unit;
• providing a controller which is capable of applying said access codes to said data storage unit;
• remotely providing the controller with one of said different access codes to decrypt a selected one of said encrypted data sets in response to the receipt of one of said access code identifiers, said controller accessing said data sets stored in said data storage unit, wherein:
• said access codes are further stored with attributes defined in a manner which corresponds to particular properties of said data sets, both the access codes and the attributes being transmitted to said controller in response to the provision to the controller of one of said access code identifiers;
• and
• said data storage unit stores update instructions and an update counter value for enabling said controller to use said access codes to generate an updated access code for enabling access to previously inaccessible parts of said data on said data storage unit.

A system for encrypting data, comprising:

• a memory medium including programming codes stored thereon for encrypting individual data sets and for assigning access code identifiers to said individual data sets, each of said access code identifiers associated with and used in identifying a particular access code for decrypting one of said individual data sets, said access code identifier for identifying said particular access code;
• a processor in communication with said memory medium for writing said encrypted individual data sets to a data storage unit so that at least some of said individual data sets are stored in conjunction with access code identifiers on said data storage unit;
• and
• a remote access code distribution controller for transferring a particular one of said access codes for use with said data storage unit on receipt of one of said access code identifiers, wherein said data storage unit stores update instructions and an update counter value for enabling said controller to use said access codes to generate an updated access code for enabling access to previously inaccessible parts of said data on said data storage unit.

A method for encrypting data sets to control access thereto, comprising the steps of:

• defining attributes that correspond to particular properties of said data sets;
• binding said attributes to access codes and storing attributes and access codes in a first location;
• encoding said data sets so the data sets may be decrypted by said access codes when said access codes are applied to said data sets by a processor;
• storing said encoded data sets on a data storage unit;
• transmitting to a second location from said first location one of said access codes bound to one of said attributes;
• providing a controller for communication with said data storage unit and wherein, upon transmitting one of said identifying codes to a remote authorization center, one of said access codes is downloaded to said controller wherein said controller provides access to said data sets stored on said data storage unit, wherein said data storage unit stores thereon instructions and an update counter value for enabling said controller to use said access codes to generate an updated access code for enabling access to previously inaccessible parts of said data stored on said data storage unit.