US 7,669,051 B2 · Data security system and method with multiple independent levels of security

Abstract

The method, program and information processing system secures data, and particularly security sensitive words, characters or data objects in the data, in a computer system with multiple independent levels of security (MILS). Each level of MILS has a computer sub-network with networked workstations. The MILS sub-networks are connected together via security guard computer(s) and each guard computer has separate memories for each level (TS, S, C, UC (or remainder)). The method extracts the security sensitive words/data (a granular action), from the source document for each MILS level, stores the extracted data in a corresponding extract store for each level and permits reconstruction/reassembly of the dispersed data via said extracted data at each said level of said multiple security levels and remainder data only in the presence of a predetermined security clearance commensurate with each MILS level.

Claims45

Dependent claims

A method of securing data having one or more security sensitive words, characters or data objects in a computer system with multiple independent security levels, each level of said multiple security levels having a computer sub-network including a plurality of computer work stations coupled together via an independent communications network at an independent security level, said sub-networks connected together via a security guard computer, said security guard computer having separate memories designated as a remainder store and a plurality of extract stores corresponding to each level of said multiple security levels, the method of securing data comprising:

extracting said security sensitive words, characters or data objects from said data to obtain extracted data at each said level of said multiple security levels and remainder data therefrom;
storing said extracted data in a corresponding extract store for each said level of said multiple security levels and said remainder data in said remainder store;
and,
permitting reconstruction of said data via said extracted data at each said level of said multiple security levels and remainder data only in the presence of a predetermined security clearance commensurate with each said level of said multiple security levels.

1 more element

A computer readable medium containing programming instructions for securing data having one or more security sensitive words, characters or data objects in a computer system with multiple independent security levels, each level of said multiple security levels having a computer sub-network including a plurality of computer work stations coupled together via an independent communications network at an independent security level, said sub-networks connected together via a security guard computer, said security guard computer having separate memories designated as a remainder store and a plurality of extract stores corresponding to each level of said multiple security levels, the instructions comprising:

extracting said security sensitive words, characters or data objects from said data to obtain extracted data at each said level of said multiple security levels and remainder data therefrom;
storing said extracted data in a corresponding extract store for each said level of said multiple security levels and said remainder data in said remainder store;
and,
permitting reconstruction of said data via said extracted data at each said level of said multiple security levels and remainder data only in the presence of a predetermined security clearance commensurate with each said level of said multiple security levels.

1 more element

An information processing system for securing data having one or more security sensitive words, characters or data objects in a computer system with multiple independent security levels, each level of said multiple security levels having a computer sub-network including a plurality of computer work stations coupled together via an independent communications network at an independent security level, said sub-networks connected together via a security guard computer, said security guard computer having separate memories designated as a remainder store and a plurality of extract stores corresponding to each level of said multiple security levels, the processing system comprising:

means for extracting said security sensitive words, characters or data objects from said data to obtain extracted data at each said level of said multiple security levels and remainder data therefrom;
means for storing said extracted data in a corresponding extract store for each said level of said multiple security levels and said remainder data in said remainder store;
and,
means for permitting reconstruction of said data via said extracted data at each said level of said multiple security levels and remainder data only in the presence of a predetermined security clearance commensurate with each said level of said multiple security levels.

1 more element

Dependencies are inferred from the claim text.

Facts

Application

10/998,366Filed 26 Nov 2004 · continuation in part

Priority

13 Nov 2000

Published

US 2005/0138110 A123 Jun 2005

Granted

23 Feb 2010

Term ends

Not estimatedThe source records don’t support an estimate.

Classification14 codes

C07K 14/70575
Receptors; Cell surface antigens; Cell surface determinants: ngf/tnf-superfamily, e.g. cd70, cd95l, cd153, cd154
G06F 21/62
Protecting data: protecting access to data via a platform, e.g. using keys or access control rules
G06F 21/6209
Protecting access to data via a platform, e.g. using keys or access control rules: to a single file or object, e.g. in a secure envelope,…
G06F 21/6245
To a system of files or objects, e.g. local or distributed file system or database: protecting personal data, e.g. for financial or medical purposes

Family

Application60/247,242Us provisional application · filed 13 Nov 2000

Application60/247,232Us provisional application · filed 13 Nov 2000

Application60/260,398Us provisional application · filed 9 Jan 2001

Application60/267,944Us provisional application · filed 12 Feb 2001

Application60/287,813Us provisional application · filed 2 May 2001

Application09/916,397Parent of this continuation-in-part · filed 27 Jul 2001

Application10/008,209Parent of this continuation-in-part · filed 6 Dec 2001

Application10/008,218Parent of this continuation-in-part · filed 6 Dec 2001

Application10/155,192Parent of this continuation-in-part · filed 23 May 2002

Application10/155,525Parent of this continuation-in-part · filed 23 May 2002

Application60/400,062Us provisional application · filed 2 Aug 2002

Application60/400,112Us provisional application · filed 2 Aug 2002

Application60/400,406Us provisional application · filed 2 Aug 2002

Application60/400,407Us provisional application · filed 2 Aug 2002

Application10/277,196Parent of this continuation-in-part · filed 31 Dec 2002

Application60/525,507Us provisional application · filed 26 Nov 2003

US 2005/0138110 A1Pre-grant publication · published 23 Jun 2005

US 7,322,047 B2Parent of this continuation-in-part

US 7,349,987 B2Parent of this continuation-in-part

US 7,191,252 B2Parent of this continuation-in-part

US 7,140,044 B2Parent of this continuation-in-part

US 7,146,644 B2Parent of this continuation-in-part

US 7,103,915 B2Parent of this continuation-in-part

US 2002/0091734 A1Published application

US 2002/0091975 A1Published application

US 2002/0099959 A1Published application

US 2003/0051054 A1Published application

US 2003/0070077 A1Published application

US 2003/0120949 A1Published application

US 7,669,051 B2This patent

From the US filing history. Foreign family members aren’t listed.

Data security system and method with multiple independent levels of security

Life of this patent

Data security system and method with multiple independent levels of security

Life of this patent

Abstract

Claims45