Patent US4653074A successfully refreshed from Google Patents.
US6148342A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Secure database management system for confidential records using separately encrypted identifier and access request
Assignee: Individual
•
Filing: 1999-01-13
•
Granted: 2000-11-14
•
Expires: 2019-01-13
Abstract
Abstract A system for managing sensitive data is described. The system prevents a system administrator from accessing sensitive data by storing data and identifier information on different computer systems. Each query is encrypted using two codes, the first code readable only by an identifier database and a second code readable only by a data access database. By routing the data path from a source terminal to the identifier database which substitutes an internal ID, then to the data access database and back to the source terminal, data security is significantly improved.
Inventors
- 👤 Andrew P. Ho
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-01 09:49
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/60; G06F21/62; G06F21/6218; G06F21/6245; G06F2211/00; G06F2211/007; G06F2211/008
Claims Analysis
Total Claims: 19
Claim 1
Independent Claim
68 words
A method for managing data comprising: transmitting a packet of data including an identifier encrypted in a first code and a data access request encrypted with a second code to a first system, the data access request requesting data corresponding to the identifier, the first system configured to decode and authenticate the identifier and to forward the data access request with an internal index to a second system.
Claim 2
Independent Claim
68 words
A method for managing data comprising: transmitting a packet of data including an identifier encrypted in a first code and a data access request encrypted with a second code to a first system, the data access request requesting data corresponding to the identifier, the first system configured to decode and authenticate the identifier and to forward the data access request with an internal index to a second system.
Claim 3
Dependent Claim
25 words
The method of claim 1 wherein the first system is under a first administrative control and the second system is under a second administrative control.
Claim 4
Dependent Claim
32 words
The method of claim 1 further comprising: encrypting the identifier using a public key of the first system; and encrypting the data access request using a public key of the second system.
Claim 5
Dependent Claim
22 words
The method of claim 3 where in the identifier is digitally signed enabling authentication of an originator of the packet of data.
Claim 6
Dependent Claim
12 words
The method of claim 1 wherein the identifier includes a subject representation.
Claim 7
Dependent Claim
46 words
The method of claim 1 wherein the first system updates a log indicating receipt of query or transmission of the packet of data and the second system updates a log indicating receipt of the data access request or transmission of results of the data access request.
Claim 8
Independent Claim
96 words
An apparatus under control of a first administrator to process secure data comprising: an input port to receive an identifier encrypted in a first code and a data access request encrypted in a second code from a source, the data access request requesting data corresponding to the identifier; a processor to decrypt the first code and determine an internal identification corresponding to the identifier; and an output connection to output the internal identification and the data access request encrypted in the second code to a second apparatus including a second database operating under a second administrator.
Claim 9
Independent Claim
96 words
An apparatus under control of a first administrator to process secure data comprising: an input port to receive an identifier encrypted in a first code and a data access request encrypted in a second code from a source, the data access request requesting data corresponding to the identifier; a processor to decrypt the first code and determine an internal identification corresponding to the identifier; and an output connection to output the internal identification and the data access request encrypted in the second code to a second apparatus including a second database operating under a second administrator.
Claim 10
Dependent Claim
22 words
The apparatus of claim 7 wherein the processor verifies that a user issuing the data access request has an appropriate access level.
Claim 11
Dependent Claim
28 words
The apparatus of claim 8 wherein the processor transmits the data access request to the second apparatus after a verification that the source has the appropriate access level.
Claim 12
Dependent Claim
26 words
The apparatus of claim 7 further comprising: a memory to store a log, the log including records of internal identification codes transmitted to the second apparatus.
Claim 13
Dependent Claim
15 words
The apparatus of claim 7 wherein the first code is decoded using a private key.
Claim 14
Independent Claim
134 words
A system to manage sensitive data comprising: a source terminal to receive a data access request, and output a data packet, the data packet including a first subsection of identifier information coded in a first code and a second subsection of request data coded in a second code, the data access request requesting data corresponding to the identifier information; an identifier database to receive the data packet and decode the identifier information, the identifier subnetwork retrieving an internal identifier based on the identifier information, and associating the internal identifier with the request data coded in the second code; and a data request database to receive the internal identifier and the request data coded in the second code, the data request database to decode the request data and return a response to the source terminal.
Claim 15
Independent Claim
134 words
A system to manage sensitive data comprising: a source terminal to receive a data access request, and output a data packet, the data packet including a first subsection of identifier information coded in a first code and a second subsection of request data coded in a second code, the data access request requesting data corresponding to the identifier information; an identifier database to receive the data packet and decode the identifier information, the identifier subnetwork retrieving an internal identifier based on the identifier information, and associating the internal identifier with the request data coded in the second code; and a data request database to receive the internal identifier and the request data coded in the second code, the data request database to decode the request data and return a response to the source terminal.
Claim 16
Dependent Claim
30 words
The system of claim 12 wherein the first code uses a public key of the identifier database and the second code uses a public key of the data request database.
Claim 17
Dependent Claim
22 words
The system of claim 12 wherein the identifier database and the data request database are each a part of a corresponding subnetwork.
Claim 18
Independent Claim
51 words
A method of managing sensitive data comprising: receiving an internal identifier associated with a coded data request from an identifier database, the coded data request requesting data corresponding to the internal identifier; decoding the coded data request and performing the data request; and transmitting an output response to a source terminal.
Claim 19
Independent Claim
51 words
A method of managing sensitive data comprising: receiving an internal identifier associated with a coded data request from an identifier database, the coded data request requesting data corresponding to the internal identifier; decoding the coded data request and performing the data request; and transmitting an output response to a source terminal.
References Cited (Backward Citations)
US5202921A
Cited
US5245656A
Cited
US5319705A
Cited
US5606610A
Cited
US5539824A
Cited
US5420926A
Cited
US5640454A
Cited
US5864683A
Cited
US5754939A
Cited
US5768391A
Cited
US5673316A
Cited
US5920630A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2003-11-14 | 2004-05-15 | 2004-11-14 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2007-11-14 | 2008-05-15 | 2008-11-14 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2011-11-14 | 2012-05-15 | 2012-11-14 | $7700.00 | Window Closed / Lapsed |