← Back to Patent Explorer
US5369702A Expired / Lapsed US ⏱️ 0.0 years remaining

Distributed cryptographic object method

Assignee: Tecsec Inc
•
Filing: 1993-10-18
•
Granted: 1994-11-29
•
Expires: 2013-10-18
📄 Original PDF 🌐 Google Patents 🔄 Sync Now

Abstract

Abstract A system for increasing the security of a computer system, while giving an individual user a large amount of flexibility and power. To give users the most power and flexibility, a standard object that has the capability to embed objects is used. To allow users even more flexibility, a standard object tracking mechanism is used that allows users to distribute multiple encrypted embedded objects to other individuals in a single encrypted object. By effecting compartmentalization of every object by label attributes and algorithm attributes, multi-level multimedia security is achieved.

Inventors

  • 👤 M. Greg Shanton

Bibliographic Details

Application Number —
Jurisdiction US
Data Source google_patents
Last Synchronized 2026-10-25 16:04
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/10; G06F12/00; G06F12/14; G06F12/1408; G06F12/1458; G06F12/1491; G06F21/60; G06F21/62; G06F21/6209; G06F21/6218; G06F21/6227; H; H04; H04L; H04L9/00; H04L9/08; H04L9/0816; H04L9/0819; H04L9/083; H04L9/088; G06F2221/00; G06F2221/21; G06F2221/2107

Claims Analysis

Total Claims: 18
Claim 1
Independent Claim 77 words
A method for providing multi-level multimedia security in a data network, comprising the steps of: A) accessing an object-oriented key manager; B) selecting an object to encrypt; C) selecting a label for the object; D) selecting an encryption algorithm; E) encrypting the object according to the encryption algorithm: F) labelling the encrypted object: G) reading the object label; H) determining access authorization based on the object label; and I) decrypting the object if access authorization is granted.
Claim 2
Independent Claim 77 words
A method for providing multi-level multimedia security in a data network, comprising the steps of: A) accessing an object-oriented key manager; B) selecting an object to encrypt; C) selecting a label for the object; D) selecting an encryption algorithm; E) encrypting the object according to the encryption algorithm: F) labelling the encrypted object: G) reading the object label; H) determining access authorization based on the object label; and I) decrypting the object if access authorization is granted.
Claim 3
Dependent Claim 47 words
The method of claim 1, wherein the object is an application document, and further comprising the steps of: A) creating an object in an application prior to accessing the object-oriented key manager; and B) returning the encrypted object to the application prior to reading the object label.
Claim 4
Dependent Claim 23 words
The method of claim 1, further comprising the step of embedding the encrypted object in a second object after labelling the encrypted object.
Claim 5
Dependent Claim 41 words
The method of claim 3, further comprising the steps of: A) selecting a second label for the second object; B) selecting an encryption algorithm; C) encrypting the second object; and D) labelling the second encrypted object with a second object label.
Claim 6
Dependent Claim 37 words
The method of claim 4, further comprising the steps of: A) reading the second object label; B) determining access authorization based on the second object label; and C) decrypting the second object if access authorization is granted.
Claim 7
Dependent Claim 15 words
The method of claim 4, wherein the second label is a second plurality of labels.
Claim 8
Dependent Claim 13 words
The method of claim 1, wherein the label is a plurality of labels.
Claim 9
Independent Claim 251 words
A system for providing multi-level multimedia security in a data network, comprising: A) digital logic means, the digital logic means comprising: 1) a system memory means for storing data; 2) an encryption algorithm module, comprising logic for converting unencrypted objects into encrypted objects, the encryption algorithm module being electronically connected to the system memory means for accessing data stored in the first system memory; 3) an object labelling subsystem, comprising logic means for limiting object access, subject to label conditions, the object labelling subsystem being electronically connected to the system memory means for accessing data stored in the system memory means and the object labelling subsystem being further electronically connected to the encryption algorithm module to accept inputs from the encryption algorithm module; 4) a decryption algorithm module, comprising logic for converting encrypted objects into unencrypted objects, the decryption algorithm module being electronically connected to the system memory means for accessing data stored in the system memory means; and 5) an object label identification subsystem, comprising logic for limiting object access, subject to label conditions, the object label identification subsystem being electronically connected to the system memory means for accessing data stored in the system memory means and the object label identification subsystem being further electronically connected to the decryption algorithm module to accept inputs from the decryption algorithm module; B) the encryption algorithm module working in conjunction with the object labelling subsystem to create an encrypted object such that the object label identification subsystem limits access to an encrypted object.
Claim 10
Independent Claim 251 words
A system for providing multi-level multimedia security in a data network, comprising: A) digital logic means, the digital logic means comprising: 1) a system memory means for storing data; 2) an encryption algorithm module, comprising logic for converting unencrypted objects into encrypted objects, the encryption algorithm module being electronically connected to the system memory means for accessing data stored in the first system memory; 3) an object labelling subsystem, comprising logic means for limiting object access, subject to label conditions, the object labelling subsystem being electronically connected to the system memory means for accessing data stored in the system memory means and the object labelling subsystem being further electronically connected to the encryption algorithm module to accept inputs from the encryption algorithm module; 4) a decryption algorithm module, comprising logic for converting encrypted objects into unencrypted objects, the decryption algorithm module being electronically connected to the system memory means for accessing data stored in the system memory means; and 5) an object label identification subsystem, comprising logic for limiting object access, subject to label conditions, the object label identification subsystem being electronically connected to the system memory means for accessing data stored in the system memory means and the object label identification subsystem being further electronically connected to the decryption algorithm module to accept inputs from the decryption algorithm module; B) the encryption algorithm module working in conjunction with the object labelling subsystem to create an encrypted object such that the object label identification subsystem limits access to an encrypted object.
Claim 11
Dependent Claim 22 words
The system of claim 8, wherein the digital logic means further comprises means for embedding a first object within a second object.
Claim 12
Dependent Claim 24 words
The system of claim 9, wherein the digital logic means further comprises means for accessing computer program applications stored in the system memory means.
Claim 13
Dependent Claim 24 words
The system of claim 8, wherein the digital logic means further comprises means for accessing computer program applications stored in the system memory means.
Claim 14
Independent Claim 86 words
A system for providing multi-level multimedia security in a data network, comprising: A) means for accessing an object-oriented key manager; B) means for selecting an object to encrypt; C) means for selecting a label for the object; D) means for selecting an encryption algorithm; E) means for encrypting the object; F) means for labelling the encrypted object; G) means for reading the object label; H) means for determining access authorization based on the label; and I) means for accessing the object if access authorization is granted.
Claim 15
Independent Claim 86 words
A system for providing multi-level multimedia security in a data network, comprising: A) means for accessing an object-oriented key manager; B) means for selecting an object to encrypt; C) means for selecting a label for the object; D) means for selecting an encryption algorithm; E) means for encrypting the object; F) means for labelling the encrypted object; G) means for reading the object label; H) means for determining access authorization based on the label; and I) means for accessing the object if access authorization is granted.
Claim 16
Dependent Claim 52 words
The system of claim 12, wherein the object is an application document and the wherein the system further comprises: A) means for creating an object in an application prior to accessing the object-oriented key manager; and B) means for returning the encrypted object to the application prior to reading the object label.
Claim 17
Dependent Claim 16 words
The system of claim 13, further comprising means for embedding an object within a second object.
Claim 18
Dependent Claim 40 words
The system of claim 14, further comprising: A) means for reading the second object label; B) means for determining access authorization based on the second object label; and C) means for decrypting the second object if access authorization is granted.

References Cited (Backward Citations)

US4218582A Cited
US4405829A Cited
US4424414A Cited
US4713753A Cited
US4864616A Cited
US4955082A Cited
US4984272A Cited
US4962533A Cited
US5052040A Cited
US5204961A Cited

USPTO Annuity & Maintenance Windows

Annuity Stage Window Opens Payment Deadline Surcharge Period Until Estimated Fee Status
3.5 Years (Year 4) 1997-11-28 1998-05-30 1998-11-29 $2000.00 Window Closed / Lapsed
7.5 Years (Year 8) 2001-11-28 2002-05-30 2002-11-29 $3760.00 Window Closed / Lapsed
11.5 Years (Year 12) 2005-11-28 2006-05-30 2006-11-29 $7700.00 Window Closed / Lapsed

Assigned Categories & Tags

No categories assigned to this patent yet.

Assign Category Tag