Data security system and method for separation of user communities

A computer readable medium containing programming instructions for securing data in a computer network and transparently establishing and managing the separation of user-based communities of interest based upon crypto-graphically separated, need to know security levels, said data having one or more security sensitive words, data objects, characters or icons, said computer network having a plurality of computers interconnected together, one of said plurality of computers designated as a data input computer and each of said plurality of computers having a memory therein, respective memories designated as a remainder store and respective extract stores in one or more computers of said plurality of computers, said user-based communities of interest representing a plurality of users having a corresponding plurality of security levels each with a respective security clearance and respective extract store, the programming instructions comprising:

• filtering data input from said data input computer and extracting said security sensitive words, data objects, characters or icons from said data to obtain (a) subsets of extracted data and (b) remainder data;
• storing said subsets of extracted data and said remainder data in said respective extract stores and said remainder store, respectively;
• and,
• permitting reconstruction of some or all of said data via one or more of said subsets of extracted data and remainder data only in the presence of a predetermined security clearance of said plurality of security levels.

An information processing system for securing data in a computer network and transparently establishing and managing the separation of user-based communities of interest based upon crypto-graphically separated, need to know security levels, said data having one or more security sensitive words, data objects, characters or icons, said computer network having a plurality of computers for a plurality of users all interconnected together, one of said plurality of computers designated as a data input computer and each of said plurality of computers having a memory therein, respective memories designated as a remainder store and respective extract stores in one or more computers of said plurality of computers, said user-based communities of interest representing said plurality of users having a corresponding plurality of security levels each with a respective security clearance and respective extract store, comprising:

• means for filtering data input from said data input computer and extracting said security sensitive words, data objects, characters or icons from said data to obtain (a) subsets of extracted data and (b) remainder data;
• means for storing said subsets of extracted data and said remainder data in said respective extract store and said remainder store, respectively;
• and,
• means for permitting reconstruction of some or all of said data via one or more of said subsets of extracted data and remainder data only in the presence of a predetermined security clearance of said plurality of security levels.

A method of securing data and transparently managing the separation of user-based communities of interest based upon crypto-graphically separated, need to know security levels with a plurality of encryption types, said data having one or more security sensitive words, data objects, characters or icons, said user-based communities of interest representing a plurality of users having a corresponding plurality of security levels each with a respective security clearance and respective extract stores, comprising:

• filtering data and extracting said security sensitive words, data objects, characters or icons from said data to obtain (a) subsets of extracted data for said respective extract stores and (b) remainder data;
• encrypting said subsets of extracted data with said plurality of encryption types and storing extracted and remainder data in respective extract stores and remainder store;
• and,
• permitting reconstruction of some or all of said data via one or more of said subsets of encrypted extracted data and remainder data from said extract stores and remainder store only in the presence of a respective predetermined security clearance of said plurality of security levels.

A method of securing data and transparently managing the separation of user-based communities of interest based upon crypto-graphically separated, need to know security levels with a plurality of encryption types, said data having one or more security sensitive words, data objects, characters or icons, said user-based communities of interest representing a plurality of users having a corresponding plurality of security levels each with a respective security clearance and respective extract stores, comprising:

• filtering data and extracting said security sensitive words, data objects, characters or icons from said data to obtain (a) subsets of extracted data for said respective extract stores and (b) remainder data;
• encrypting said subsets of extracted data with said plurality of encryption types to obtain multiple level encryption and storing extracted and remainder data in respective extract stores and remainder store;
• and,
• decrypting all or portions of said data from said extract stores and remainder store with multiple level encryption only in the presence of a respective predetermined security clearance of said plurality of security levels.