US7562232B2
Expired / Lapsed
US
⏱️ 0.0 years remaining
System and method for providing manageability to security information for secured items
Assignee: Intellectual Ventures I LLC
•
Filing: 2002-07-25
•
Granted: 2009-07-14
•
Expires: 2022-07-25
Abstract
Abstract Improved approaches for accessing secured digital assets (e.g., secured items) are disclosed. In general, digital assets that have been secured (secured digital assets) can only be accessed by authenticated users with appropriate access rights or privileges. Each secured digital asset is provided with a header portion and a data portion, where the header portion includes a pointer to separately stored security information. The separately stored security information is used to determine whether access to associated data portions of secured digital assets is permitted. These improved approaches can facilitate the sharing of security information by various secured digital assets and thus reduce the overall storage space for the secured digital assets. These improved approaches can also facilitate efficient management of security for digital assets.
Inventors
- 👤 Patrick Zuili
- 👤 Klimenty Vainstein
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-27 05:00
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/04; G; G06; G06F; G06F21/00; G06F21/60; G06F21/62; G06F21/6209; G06F21/6218; G06F21/6227; H04L63/08; H04L63/10; H04L63/105; H04L63/12; H04L67/00; H04L67/01; G06F2221/00; G06F2221/21; G06F2221/2107; G06F2221/2111; G06F2221/2113; G06F2221/2137; G06F2221/2141; H04L63/101; H04L63/102
Claims Analysis
Total Claims: 35
Claim 1
Independent Claim
196 words
A computer readable storage medium having stored thereon computer program code, that if executed by a processor, causes the processor to access a secured item among a plurality of secured items by a method, the method comprising: obtaining the secured item to be accessed, the secured item having a header portion and a data portion; retrieving a security information pointer from the header portion of the secured item, wherein each of the plurality of secured items has the same security information pointer as the secured item, such that the plurality of secured items share common security information, wherein the security information includes at least an access rule and user privileges; obtaining security information for the secured item using the security information pointer; and permitting access to the secured item to the extent permitted by the security information, wherein the permitting comprises: retrieving a file key from the header portion; decrypting the data portion of the secured item using the file key; retrieving at least one access rule from the security information; and determining whether a requestor is permitted to access the secured item based on the at least one access rule and characteristics of the requestor.
Claim 2
Dependent Claim
196 words
A computer readable storage medium having stored thereon computer program code, that if executed by a processor, causes the processor to access a secured item among a plurality of secured items by a method, the method comprising: obtaining the secured item to be accessed, the secured item having a header portion and a data portion; retrieving a security information pointer from the header portion of the secured item, wherein each of the plurality of secured items has the same security information pointer as the secured item, such that the plurality of secured items share common security information, wherein the security information includes at least an access rule and user privileges; obtaining security information for the secured item using the security information pointer; and permitting access to the secured item to the extent permitted by the security information, wherein the permitting comprises: retrieving a file key from the header portion; decrypting the data portion of the secured item using the file key; retrieving at least one access rule from the security information; and determining whether a requestor is permitted to access the secured item based on the at least one access rule and characteristics of the requestor.
Claim 3
Dependent Claim
24 words
The computer readable storage medium as recited in claim 1 , wherein the requestor characteristics include at least a group association for the requestor.
Claim 4
Dependent Claim
25 words
The computer readable storage medium as recited in claim 1 , wherein the at least one access rule is provided in a markup language format.
Claim 5
Dependent Claim
43 words
The computer readable storage medium as recited in claim 1 , wherein a requestor desires to access the secured item, and wherein the method further comprises: decrypting the security information after being obtained and before being used to determine whether access is permitted.
Claim 6
Dependent Claim
25 words
The computer readable storage medium as recited in claim 4 , wherein the decrypting of the security information uses a key associated with the requestor.
Claim 7
Dependent Claim
22 words
The computer readable storage medium as recited in claim 5 , wherein the key associated with the requestor is a user key.
Claim 8
Dependent Claim
35 words
The computer readable storage medium as recited in claim 1 , wherein the security information includes at least access rules, and the header portion includes at least the security information pointer and the file key.
Claim 9
Dependent Claim
51 words
The computer readable storage medium as recited in claim 7 , wherein when the permitting determines that the requestor is permitted to access the secured item, the permitting further comprises: retrieving the file key from the header portion; and decrypting the data portion of the secured item using the file key.
Claim 10
Dependent Claim
20 words
The computer readable storage medium as recited in claim 8 , wherein the file key is an encrypted file key.
Claim 11
Dependent Claim
38 words
The computer readable storage medium as recited in claim 9 , wherein a requestor desires to access the secured item, and wherein the decrypting of the encrypted file key is performed using a key associated with the requestor.
Claim 12
Dependent Claim
19 words
The computer readable storage medium as recited in claim 1 , wherein the secured item is a secured file.
Claim 13
Dependent Claim
19 words
The computer readable storage medium as recited in claim 1 , wherein the secured item is a secured document.
Claim 14
Dependent Claim
37 words
The computer readable storage medium as recited in claim 1 , the method further comprising: changing the security information associated with the security information pointers without having to change each of the plurality of secured items individually.
Claim 15
Dependent Claim
26 words
The computer readable storage medium as recited in claim 1 , wherein the security information pointers point directly to a storage location of the security information.
Claim 16
Dependent Claim
27 words
The computer readable storage medium as recited in claim 1 , wherein the security information pointers point to a security information table associated with the security information.
Claim 17
Dependent Claim
36 words
The computer readable storage medium as recited in claim 1 , wherein the security information pointers point to different versions of the security information providing different levels of access control depending on a user's access privilege.
Claim 18
Independent Claim
260 words
A system for accessing a secured item among a plurality of secured items, the secured item having a header portion and an encrypted data portion, the header portion including a security information pointer and a file key, wherein each of the plurality of secured items has the same security information pointer as the secured item, such that the plurality of secured items share common security information, the system comprising: a storage device configured to store the security information for the plurality of secured items, wherein the security information includes at least an access rule and user privileges; a first decryption module configured to: receive the security information pointer from the header portion of the secured item; receive the file key from the header portion of the secured item; and receive at least one access rule from the security information; an access analyzer operatively connected coupled to the storage device, the access analyzer configured to determine whether the encrypted data portion is permitted to be accessed by a requestor based on the security information, wherein the access analyzer determines whether the encrypted data portion is permitted to be accessed by the requestor based on the at least one access rule and characteristics of the requestor; and a second decryption module coupled to the access analyzer, the second decryption module configured to decrypt the encrypted data portion using the file key to produce an unencrypted data portion that the requestor is able to access, provided the access analyzer determines that the encrypted data portion is permitted to be accessed by the requestor.
Claim 19
Independent Claim
260 words
A system for accessing a secured item among a plurality of secured items, the secured item having a header portion and an encrypted data portion, the header portion including a security information pointer and a file key, wherein each of the plurality of secured items has the same security information pointer as the secured item, such that the plurality of secured items share common security information, the system comprising: a storage device configured to store the security information for the plurality of secured items, wherein the security information includes at least an access rule and user privileges; a first decryption module configured to: receive the security information pointer from the header portion of the secured item; receive the file key from the header portion of the secured item; and receive at least one access rule from the security information; an access analyzer operatively connected coupled to the storage device, the access analyzer configured to determine whether the encrypted data portion is permitted to be accessed by a requestor based on the security information, wherein the access analyzer determines whether the encrypted data portion is permitted to be accessed by the requestor based on the at least one access rule and characteristics of the requestor; and a second decryption module coupled to the access analyzer, the second decryption module configured to decrypt the encrypted data portion using the file key to produce an unencrypted data portion that the requestor is able to access, provided the access analyzer determines that the encrypted data portion is permitted to be accessed by the requestor.
Claim 20
Dependent Claim
52 words
The system as recited in claim 17 , wherein the requestor has user privileges associated therewith, and wherein the access analyzer determines whether the encrypted data portion is permitted to be accessed by the requestor based on applying the access rule and the user privileges to the requestor and the secured item.
Claim 21
Dependent Claim
36 words
The system as recited in claim 17 , further comprising: a security management system configured to change the security information associated with the pointers without having to change each of the plurality of secured items individually.
Claim 22
Dependent Claim
17 words
The system as recited in claim 17 , wherein the pointers point directly to the storage device.
Claim 23
Dependent Claim
26 words
The system as recited in claim 17 , wherein the pointers point to a security information table associated with the security information in the storage device.
Claim 24
Dependent Claim
31 words
The system as recited in claim 17 , wherein the pointers point to different versions of the security information providing different levels of access control depending on a user's access privilege.
Claim 25
Independent Claim
184 words
A method for accessing a secured file stored in a storage device, comprising: obtaining the secured file to be accessed, the secured file having a header portion and a data portion, wherein the storage device is configured to store security information for a plurality of secured items, wherein the security information includes at least access rules; retrieving a security information pointer from the header portion of the secured file, wherein the plurality of secured items have the same security information pointer as the secured file, such that the plurality of secured items share the security information; obtaining, from the storage device, security information for the secured file using the security information pointer; and permitting access to the secured file to the extent permitted by the security information, wherein the permitting comprises: retrieving a file key from the header portion; decrypting the data portion of the secured file using the file key; retrieving at least one access rule from the security information; and determining whether a requestor is permitted to access the secured file based on the at least one access rule and requestor characteristics.
Claim 26
Independent Claim
184 words
A method for accessing a secured file stored in a storage device, comprising: obtaining the secured file to be accessed, the secured file having a header portion and a data portion, wherein the storage device is configured to store security information for a plurality of secured items, wherein the security information includes at least access rules; retrieving a security information pointer from the header portion of the secured file, wherein the plurality of secured items have the same security information pointer as the secured file, such that the plurality of secured items share the security information; obtaining, from the storage device, security information for the secured file using the security information pointer; and permitting access to the secured file to the extent permitted by the security information, wherein the permitting comprises: retrieving a file key from the header portion; decrypting the data portion of the secured file using the file key; retrieving at least one access rule from the security information; and determining whether a requestor is permitted to access the secured file based on the at least one access rule and requestor characteristics.
Claim 27
Dependent Claim
19 words
The method of claim 23 , wherein the requester characteristics include at least a group association for the requester.
Claim 28
Dependent Claim
20 words
The method of claim 23 , wherein the at least one access rule is provided in a markup language format.
Claim 29
Dependent Claim
31 words
The method of claim 23 , wherein after obtaining security information for the secured file from the storage device, but before the permitting, the method further comprises: decrypting the security information.
Claim 30
Dependent Claim
20 words
The method of claim 26 , wherein decrypting the security information is performed using a key associated with the requestor.
Claim 31
Dependent Claim
17 words
The method of claim 27 , wherein the key associated with the requester is a user key.
Claim 32
Dependent Claim
20 words
The method claim 23 , wherein the header portion includes at least the security information pointer and the file key.
Claim 33
Dependent Claim
43 words
The method of claim 29 , wherein when access to the secured file is permitted by the requestor, the permitting further comprises: retrieving the file key from the header portion; and decrypting the data portion of the secured file using the file key.
Claim 34
Dependent Claim
15 words
The method of claim 30 , wherein the file key is an encrypted file key.
Claim 35
Dependent Claim
34 words
The method of claim 31 , wherein decrypting the data portion of the secured file using the file key is performed using a key associated with a requester requesting access to the secured file.
References Cited (Backward Citations)
US4203166A
Cited
US4799258A
Cited
US4972472A
Cited
US4734568A
Cited
US4757533A
Cited
US4827508A
Cited
US4796220A
Cited
US4888800A
Cited
US5220657A
Cited
US5247575A
Cited
US5144660A
Cited
US5235641A
Cited
US5058164A
Cited
US5052040A
Cited
US5032979A
Cited
US5204897A
Cited
US5276735A
Cited
US5502766A
Cited
US5499297A
Cited
US5535375A
Cited
US6608636B1
Cited
US5301247A
Cited
US5319705A
Cited
US5414852A
Cited
US5689718A
Cited
US5655119A
Cited
US5406628A
Cited
US5787173A
Cited
US5375169A
Cited
US5404404A
Cited
US5677953A
Cited
US5778065A
Cited
US5870477A
Cited
US5600722A
Cited
US5717755A
Cited
US5898781A
Cited
US5680452A
Cited
US5369702A
Cited
US5999907A
Cited
US5606663A
Cited
US5684987A
Cited
US5584023A
Cited
US5835601A
Cited
EP0674253A1
Cited
EP0672991A2
Cited
US5661806A
Cited
US5495533A
Cited
US5570108A
Cited
US5720033A
Cited
US5757920A
Cited
US5745573A
Cited
US5557765A
Cited
US5881287A
Cited
US5944794A
Cited
US5715403A
Cited
US20050177716A1
Cited
US6253193B1
Cited
US6272632B1
Cited
US5893084A
Cited
US5835592A
Cited
WO1996041288A1
Cited
US5671412A
Cited
US5813009A
Cited
US5821933A
Cited
US6807534B1
Cited
US5765152A
Cited
US5787175A
Cited
US6023506A
Cited
US5732265A
Cited
US5729734A
Cited
US5751287A
Cited
US5825876A
Cited
US5708709A
Cited
US5787169A
Cited
US5922073A
Cited
US20010021926A1
Cited
US6314409B2
Cited
US5933498A
Cited
US5699428A
Cited
US6351813B1
Cited
US5862325A
Cited
US6088717A
Cited
US5870468A
Cited
US6332025B2
Cited
US6810479B1
Cited
US6055314A
Cited
US5673316A
Cited
US6085323A
Cited
US5970502A
Cited
US5953419A
Cited
US5857189A
Cited
EP0809170A1
Cited
US5748736A
Cited
US5987440A
Cited
US5790789A
Cited
US5892900A
Cited
US6529956B1
Cited
US5790790A
Cited
US6909708B1
Cited
US7145898B1
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2012-07-13 | 2013-01-12 | 2013-07-14 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2016-07-13 | 2017-01-12 | 2017-07-14 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2020-07-13 | 2021-01-12 | 2021-07-14 | $7700.00 | Window Closed / Lapsed |