Patent US2709340A successfully refreshed from Google Patents.
US6978366B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Secure document management system
Assignee: International Business Machines Corp
•
Filing: 2000-10-17
•
Granted: 2005-12-20
•
Expires: 2020-10-17
Abstract
Abstract The invention provides a method and apparatus for secure management of data in a computer controlled storage system. The system includes a trusted data management server (tdm server), responsive to a user or user program application, for storing data in and retrieving data from a storage system. The tdm server includes a security structure generator to generate the following security management structures: an unique identifier for the data; access control information for the data; a data signature for authenticating the data from the data and the unique identifier; and an access control information signature for authenticating the access control information from the access control information and the unique identifier.
Inventors
- 👤 Sergey Ignatchenko
- 👤 Lev Mirlas
- 👤 Igor L. Tantsorov
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-31 22:25
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/60; G06F21/62; G06F21/6218
Claims Analysis
Total Claims: 23
Claim 1
Independent Claim
100 words
Apparatus for secure management of data in a computer controlled storage system comprising: a trusted data management server (tdm server), responsive to a user or user program application, capable of storing data in and retrieving data from a storage system that comprises: security structure generator means to generate the following security management structures: a unique identifier for said data; access control information for said data; a data signature for authenticating said data from said data and said unique identifier; and an access control information signature for authenticating said access control information from said access control information and said unique identifier.
Claim 2
Dependent Claim
100 words
Apparatus for secure management of data in a computer controlled storage system comprising: a trusted data management server (tdm server), responsive to a user or user program application, capable of storing data in and retrieving data from a storage system that comprises: security structure generator means to generate the following security management structures: a unique identifier for said data; access control information for said data; a data signature for authenticating said data from said data and said unique identifier; and an access control information signature for authenticating said access control information from said access control information and said unique identifier.
Claim 3
Dependent Claim
24 words
The apparatus of claim 1 further comprising: encryption means for encrypting: said data; and said access control information, when required by said tdm server.
Claim 4
Dependent Claim
20 words
The apparatus of claim 2 wherein said encryption means is adapted to encrypt said data and said access control information.
Claim 5
Dependent Claim
24 words
The apparatus of claim 2 further comprising: storage control means for causing said storage system to store said security management structures and said data.
Claim 6
Dependent Claim
13 words
The apparatus of claim 4 wherein said data is stored in encrypted form.
Claim 7
Dependent Claim
23 words
The apparatus of claim 5 further comprising: access control means for accessing said data stored in said storage system with said unique identifier.
Claim 8
Dependent Claim
147 words
The apparatus of claim 6 wherein said access control means comprises: means responsive to a request from a user for accessing secured data from said storage system, adapted to: retrieve a unique identifier for said data from said user or storage system; retrieve from said storage system said security management structures corresponding to said data; and carry out the following determination steps: determine if said access control information and unique identifier correspond with said access control information signature; determine if said data and its unique identifier correspond with said data signature; determine if said unique identifier of said access control information corresponds with said unique identifier of said secured data; and determine whether said access control information permits said user to access said secured data; and den grant access to said user to said data if each of said determination steps is satisfied, and otherwise refuse access.
Claim 9
Dependent Claim
21 words
The apparatus of claim 7 wherein said access control means further includes means to notify said user if access is refused.
Claim 10
Independent Claim
94 words
A method for secure management of data in a computer controlled storage system comprising: in a trusted data management server (tdm server), responsive to a user or user program application, for storing data in and retrieving data from a storage system generating the following security management structures: a unique identifier for said data; access control information for said data; a data signature for authenticating said data from said data and said unique identifier; and an access control information signature for authenticating said access control information from said access control information and said unique identifier.
Claim 11
Independent Claim
94 words
A method for secure management of data in a computer controlled storage system comprising: in a trusted data management server (tdm server), responsive to a user or user program application, for storing data in and retrieving data from a storage system generating the following security management structures: a unique identifier for said data; access control information for said data; a data signature for authenticating said data from said data and said unique identifier; and an access control information signature for authenticating said access control information from said access control information and said unique identifier.
Claim 12
Dependent Claim
15 words
The method of claim 9 further comprising: encrypting said data, or said access control information.
Claim 13
Dependent Claim
14 words
The method of claim 10 comprising encrypting said data and said access control information.
Claim 14
Dependent Claim
20 words
The method of claim 10 further comprising: causing said storage system to store said security management structures and said data.
Claim 15
Dependent Claim
11 words
The method of claim 12 wherein said data is stored encrypted.
Claim 16
Dependent Claim
18 words
The method of claim 13 further comprising: accessing said data stored in said storage with said unique identifier.
Claim 17
Dependent Claim
136 words
The method of claim 13 responsive to a request from a user for accessing data from said storage system, retrieving a unique identifier for said data from said user or database storage; retrieve from said storage system said security management structures corresponding to said secured data; and carrying out the following determination steps: determine if said access control information and its unique identifier correspond with said access control information signature; determine if said secured data and its unique identifier correspond with said data signature; determine if said unique identifier of said access control information corresponds with said secured data; and determine whether said access control information permits said user to access said secured data; and then granting access to said user to said data if each of said determination steps is satisfied, and otherwise refusing access.
Claim 18
Dependent Claim
13 words
The method of claim 15 including notifying said user if access is refused.
Claim 19
Dependent Claim
23 words
Computer readable storage means for storing instructions for use in the execution in a computer system of the method of claim 10 .
Claim 20
Dependent Claim
29 words
Computer readable storage means for storing instructions for use in the execution in a computer system for causing the computer system to effect the apparatus of claim 1 .
Claim 21
Dependent Claim
58 words
An article of manufacture comprising a computer usable medium having computer readable program code means embodied therein for causing secure management of data in a computer controlled storage system, the computer readable program code means in said article of manufacture comprising computer readable program code means for causing a computer to effect the steps of claim 9 .
Claim 22
Independent Claim
128 words
A method for storing a document in a secure storage system comprising the steps of: submitting the document for secure storage; generating a random number at a trusted document management server; requesting a database management system to reserve the generated random number as a document key; computing a digital document signature at the trusted document management server, wherein the document signature is capable of authenticating document content and the document key; creating an initial access control list (ACL) at the trusted document management server; computing a digital ACL signature at the trusted document management sever, wherein the ACL signature is capable of authenticating ACL content and the document key; and instructing the database management system to store the document, the document signature, the ACL and the ACL signature.
Claim 23
Independent Claim
128 words
A method for storing a document in a secure storage system comprising the steps of: submitting the document for secure storage; generating a random number at a trusted document management server; requesting a database management system to reserve the generated random number as a document key; computing a digital document signature at the trusted document management server, wherein the document signature is capable of authenticating document content and the document key; creating an initial access control list (ACL) at the trusted document management server; computing a digital ACL signature at the trusted document management sever, wherein the ACL signature is capable of authenticating ACL content and the document key; and instructing the database management system to store the document, the document signature, the ACL and the ACL signature.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2008-12-19 | 2009-06-20 | 2009-12-20 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2012-12-19 | 2013-06-20 | 2013-12-20 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2016-12-19 | 2017-06-20 | 2017-12-20 | $7700.00 | Window Closed / Lapsed |