Methods and apparatus for controlling access to information processed a multi-user-accessible digital computer

Claim 2

In a computer system having data storage means for storing information, access control apparatus comprising: encryption means coupled to the data storage means of the computer system for encrypting information as it is stored in said data storage means, and for decrypting the data stored in said data storage means as it is retrieved from said data storage means; and access enabling means coupled to said encryption means for enabling and disabling said encryption means; said access enabling means including: password generating means for generating a password corresponding to a specified user of the computer system, password comparison means for comparing a password entered by a user of the computer system with said generated password, means for enabling said encryption means when said entered password matches said generated password, and means for disabling said encryption means when any one of a predefined set of terminating events occurs.

Claim 3

The access control apparatus of claim 1, further including a multiplicity of password issuing means for use by authorized users of the computer system, each said password issuing means including means for generating and issuing a password to be used by said password comparison means as said entered password; whereby access to the information stored on said data storage means is limited to users having possession of one of said password issuing means.

Claim 4

The access control apparatus of claim 2, wherein said access control means includes cue means, coupled to said password generating means, for generating a series of distinct cue values, including means for specifying a cue value to be used by said password generating means; said password generating means includes means for generating a password by performing a predefined digital computation on said specified cue value; at least a multiplicity of said password issuing means include computation means for generating a password by performing said predefined digital computation on said cue value.

Claim 5

The access control apparatus of claim 2, wherein said access control means includes user definition means for assigning one of a multiplicity of predefined translation functions to each authorized user of said computer system; said access control means further includes cue means, coupled to said password generating means, for generating a series of distinct cue values, including means for specifying a cue value to be used by said password generating means; said password generating means is coupled to said user definition means and includes means for generating a password by performing translating said cue value using the predefined translation function corresponding to a specified user; and at least a multiplicity of said password issuing means include computation means for generating a password by translating said cue value using a predefined translation function; whereby access to the information stored on said data storage means is limited to authorized users having possession of a password issuing means having the same translation function as the predefined translation function corresponding to the specified user.

Claim 6

The access control apparatus of claim 2, wherein said encryption means includes means for applying a selected one a multiplicity of predefined distinct cryptoalgorithms when encrypting and decrypting information stored on said data storage means, said selected cryptoalgorithm corresponding to the identity of an authorized user accessing said data storage means.

Claim 7

In a computer system having data storage means for storing information, access control apparatus comprising: encryption means coupled to the data storage means of the computer system for encrypting information as it is stored in said data storage means, and for decrypting the data stored in said data storage means as it is retrieved from said data storage means; access enabling means, coupled to said encryption means, for enabling and disabling said encryption means; and a multiplicity of password issuing means for use by authorized users of the computer system for generating user password values, each said password issuing means including means for generating and issuing a user password value to be used by said access enabling means to determine whether a specified user is authorized to have access to information stored on said data storage means; said access enabling means including: user definition means for storing user information associated with each authorized user of said computer system, password generating means coupled to said user definition means for generating a password which is a function of the user information corresponding to a specified user of the computer system, password comparison means, coupled to said password generating means, for comparing a user password value with said generated password, and means for enabling said encryption means when said user password value matches said generated password; whereby access to the information stored on said data storage means is limited to authorized users having possession of one of said password issuing means.

Claim 8

In a computer system having data storage means for storing information, access control apparatus comprising: encryption means coupled to the data storage means of the computer system for encrypting information as it is stored in said data storage means, and for decrypting the data stored in said data storage means as it is retrieved from said data storage means; access enabling means, coupled to said encryption means, for enabling and disabling said encryption means; and a multiplicity of password issuing means for use by authorized users of the computer system for generating user password values, each said password issuing means including means for generating and issuing a user password value to be used by said access enabling means to determine whether a specified user is authorized to have access to information stored on said data storage means; said access enabling means including: user definition means for storing user information associated with each authorized user of said computer system, password generating means coupled to said user definition means for generating a password which is a function of the user information corresponding to a specified user of the computer system, password comparison means, coupled to said password generating means, for comparing a user password value with said generated password, and means for enabling said encryption means when said user password value matches said generated password; whereby access to the information stored on said data storage means is limited to authorized users having possession of one of said password issuing means.

Claim 9

The access control apparatus of claim 6, wherein said access control means includes cue means, coupled to said password generating means, for generating a series of distinct cue values, including means for specifying a cue value to be used by said password generating means; said password generating means includes means for generating a password by performing a predefined digital computation on said specified cue value, wherein said predefined digital function is a function of the user information corresponding to a specified user of the computer system; at least a multiplicity of said password issuing means include computation means for generating a password by performing a predefined digital computation on said cue value.

Claim 10

The access control apparatus of claim 7, wherein said encryption means includes means for applying a selected one a multiplicity of predefined distinct cryptoalgorithms when encrypting and decrypting information stored on said data storage means, said selected cryptoalgorithm corresponding to the identity of an authorized user accessing said data storage means.

Claim 11

In a multiuser computer system including a plurality of user interaction means for receiving and transmitting information to users of said computer system, and data storage means for storing information; access control apparatus comprising: user definition means for storing user information associated with each authorized user of said computer system, said user information including information designating portions of said data storage means associated with each authorized user; encryption means coupled to the data storage means of the computer system for encrypting information as it is stored in said data storage means, and for decrypting the data stored in said data storage means as it is retrieved from said data storage means; access enabling means, coupled to said encryption means, for enabling and disabling said encryption means; and a multiplicty of password issuing means for use by authorized users of the computer system for generating user password values, each said password issuing means including means for generating and issuing a user password value; said access enabling means including: password generating means coupled to said user definition means for generating a password which is a function of the user information corresponding to a specified user of the computer system, password comparison means, coupled to said password generating means, for comparing a user password value with said generated password, and means for enabling said encryption means when said user password value matches said generated password and the portion of said data storage means that the user is trying to access corresponds to the portion of said data storage means designated by said user definition means; whereby access to the information stored on said data storage means is limited to authorized users having possession of one of said password issuing means.

Claim 12

In a multiuser computer system including a plurality of user interaction means for receiving and transmitting information to users of said computer system, and data storage means for storing information; access control apparatus comprising: user definition means for storing user information associated with each authorized user of said computer system, said user information including information designating portions of said data storage means associated with each authorized user; encryption means coupled to the data storage means of the computer system for encrypting information as it is stored in said data storage means, and for decrypting the data stored in said data storage means as it is retrieved from said data storage means; access enabling means, coupled to said encryption means, for enabling and disabling said encryption means; and a multiplicty of password issuing means for use by authorized users of the computer system for generating user password values, each said password issuing means including means for generating and issuing a user password value; said access enabling means including: password generating means coupled to said user definition means for generating a password which is a function of the user information corresponding to a specified user of the computer system, password comparison means, coupled to said password generating means, for comparing a user password value with said generated password, and means for enabling said encryption means when said user password value matches said generated password and the portion of said data storage means that the user is trying to access corresponds to the portion of said data storage means designated by said user definition means; whereby access to the information stored on said data storage means is limited to authorized users having possession of one of said password issuing means.

Claim 13

The access control apparatus of claim 9, wherein said access control means includes cue means, coupled to said password generating means, for generating a series of distinct cue values, including means for specifying a cue value to be used by said password generating means; said password generating means includes means for generating a password by performing a predefined digital computation on said specified cue value, wherein said predefined digital function is a function of the user information corresponding to a specified user of the computer system; at least a multiplicity of said password issuing means include computation means for generating a password by performing a predefined digital computation on said cue value.

Claim 14

The access control apparatus of claim 10, wherein said encryption means includes means for applying a selected one a multiplicity of predefined distinct cryptoalgorithms when encrypting and decrypting information stored on said data storage means, said selected cryptoalgorithm corresponding to the identity of an authorized user accessing said data storage means.