US5677953A
Expired / Lapsed
US
⏱️ 0.0 years remaining
System and method for access control for portable data storage media
Assignee: SPEX TECHNOLOGIES Inc
•
Filing: 1995-06-07
•
Granted: 1997-10-14
•
Expires: 2015-06-07
Abstract
Abstract The system and method of the present invention provides the support of high density removable media, such as CD-ROM or MO, to be used as a distributed media for storing data where access thereto is securely restricted. Through this system and method, the secure periodic distribution of several different sets of data information to the end user is achieved with access control selectively performed by at the user's site through communication with the billing/access center. User billing is based on the purchase of the decryption access codes as indicated by the access code attributes encoded on the media. Access code availability is further controlled by selectively providing for updates of decryption access codes.
Inventors
- 👤 Janet L. Dolphin
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-25 18:21
CPC Classifications
H; H04; H04L; H04L9/00; G; G06; G06F; G06F21/00; G06F21/10; G06F21/105; G06F21/109; G06Q; G06Q30/00; G06Q30/04; G06F2211/00; G06F2211/007; G06F2221/00; G06F2221/21; G06F2221/2107; G06F2221/2135; Y; Y04; Y04S; Y04S40/00; Y04S40/20
Claims Analysis
Total Claims: 74
Claim 1
Independent Claim
181 words
A system for accessing data by a user, comprising: a processor for processing said data; a data storage unit for storing said data in a manner requiring different access code for accessing correspondingly different data stored on said storage unit by the user; a controller in communication with said processor for receiving a signal representative of one of said different access codes from a remote location and for sending a signal which enables access by said processor means to a selected portion of said data on said storage unit using one of said access codes; a remote authorization unit located at a location remote from said processor and said controller, said remote authorization unit for transmitting an access code to said controller from said remote location in response to an authorization request signal sent by the user to said remote authorization unit; and wherein said data storage unit stores update means cooperative with said transmitted access code for automatically generating updated access codes for access to previously unaccessible parts of said data storage unit when electronic update counter conditions are met.
Claim 2
Independent Claim
181 words
A system for accessing data by a user, comprising: a processor for processing said data; a data storage unit for storing said data in a manner requiring different access code for accessing correspondingly different data stored on said storage unit by the user; a controller in communication with said processor for receiving a signal representative of one of said different access codes from a remote location and for sending a signal which enables access by said processor means to a selected portion of said data on said storage unit using one of said access codes; a remote authorization unit located at a location remote from said processor and said controller, said remote authorization unit for transmitting an access code to said controller from said remote location in response to an authorization request signal sent by the user to said remote authorization unit; and wherein said data storage unit stores update means cooperative with said transmitted access code for automatically generating updated access codes for access to previously unaccessible parts of said data storage unit when electronic update counter conditions are met.
Claim 3
Dependent Claim
17 words
A system as recited in claim 1 wherein said updated access codes are generated by said controller.
Claim 4
Dependent Claim
28 words
A system as recited in claim 1 wherein each of said access codes is correlated with an identifying code and wherein said authorization request includes said identifying code.
Claim 5
Dependent Claim
16 words
A system as recited in claim 3 wherein said identifying code is representative of an attribute.
Claim 6
Dependent Claim
18 words
A system as recited in claim 4 wherein said attribute is representative of a use of said data.
Claim 7
Dependent Claim
14 words
A system as recited in claim 1 wherein said controller is a hardware configuration.
Claim 8
Dependent Claim
14 words
A system as recited in claim 1 wherein said controller is a software configuration.
Claim 9
Dependent Claim
23 words
A system as recited in claim 1 wherein said data stored on said data storage unit includes identifying codes for identifying said data.
Claim 10
Dependent Claim
17 words
A system as recited in claim 8 wherein said identifying codes are codes are associated with attributes.
Claim 11
Dependent Claim
17 words
A system as recited in claim 9 wherein said attribute is representative of use of said data.
Claim 12
Dependent Claim
17 words
A system as recited in claim 8 wherein said authorization request includes one of said identifying codes.
Claim 13
Independent Claim
161 words
A method for distributing data to a user comprising the steps of: on a storage unit, providing encrypted data, such requiring an access code to decrypt said data to provide access thereto wherein a least a portion of said encrypted data is correlated with a corresponding access code identifier for identifying access codes; at a remote location, storing a plurality of access codes together with corresponding access code identifiers; at a remote location, generating an authorization signal when particular conditions are met, wherein said authorization signal causes one of said access codes to be transmitted to said user to enable said user to access a portion of said encrypted data by decrypting a portion of said encrypted data and wherein said access conditions include the receipt of one of said access code identifiers from said user; applying said access code to said encrypted data to decrypt a portion of said encrypted data; and processing said decrypted portion of said encrypted data.
Claim 14
Independent Claim
161 words
A method for distributing data to a user comprising the steps of: on a storage unit, providing encrypted data, such requiring an access code to decrypt said data to provide access thereto wherein a least a portion of said encrypted data is correlated with a corresponding access code identifier for identifying access codes; at a remote location, storing a plurality of access codes together with corresponding access code identifiers; at a remote location, generating an authorization signal when particular conditions are met, wherein said authorization signal causes one of said access codes to be transmitted to said user to enable said user to access a portion of said encrypted data by decrypting a portion of said encrypted data and wherein said access conditions include the receipt of one of said access code identifiers from said user; applying said access code to said encrypted data to decrypt a portion of said encrypted data; and processing said decrypted portion of said encrypted data.
Claim 15
Dependent Claim
44 words
A method as recited in claim 12 wherein on said data storage unit, update means are stored, such cooperative with said one transmitted access code for generating updated access codes for access to previously unaccessible parts of said data on said data storage unit.
Claim 16
Dependent Claim
17 words
A method as recited in claim 13 wherein said updated access codes are generated by a controller.
Claim 17
Dependent Claim
28 words
A method as recited in claim 12 wherein said authorization signal is generated in response to an authorization request by said user, such including said access code identifier.
Claim 18
Dependent Claim
17 words
A method as recited in claim 12 wherein said access code identifier is representative of an attribute.
Claim 19
Dependent Claim
17 words
A method as recited in claim 16 wherein said attribute is representative of use of said data.
Claim 20
Dependent Claim
17 words
A method as recited in claim 12 wherein said applying step is carried out by hardware configuration.
Claim 21
Dependent Claim
17 words
A method as recited in claim 12 wherein said applying step is carried out by software configuration.
Claim 22
Dependent Claim
25 words
A method as recited in claim 12 wherein said data stored on said data storage unit include identifying codes-associated with different portions of said data.
Claim 23
Dependent Claim
15 words
A method as recited in claim 20 wherein said identifying codes are correlated with attributes.
Claim 24
Dependent Claim
17 words
A method as recited in claim 21 wherein said attributes are representative of use of said data.
Claim 25
Independent Claim
178 words
A method of distributing information in the form of data sets and providing access thereto, comprising the steps of. encrypting said data sets so that different access codes are required to decrypt different portions of said data sets; correlating said data sets with access code identifiers which identify particular access codes which will decrypt said data sets; writing said data sets on a data storage unit; providing a data storage controller which is capable of applying said access codes to said data storage means; remotely providing a data access controller with one of said different access codes to decrypt a selected one of said encrypted data sets in response to the receipt of one of said access code identifiers; said data access controller accessing said data sets written onto said data storage means; and wherein said access codes are further stored with attributes defined in a manner which corresponds to particular properties of said data sets, both of which are transmitted to said data access controller in response to the receipt of one of said access code identifiers.
Claim 26
Independent Claim
178 words
A method of distributing information in the form of data sets and providing access thereto, comprising the steps of. encrypting said data sets so that different access codes are required to decrypt different portions of said data sets; correlating said data sets with access code identifiers which identify particular access codes which will decrypt said data sets; writing said data sets on a data storage unit; providing a data storage controller which is capable of applying said access codes to said data storage means; remotely providing a data access controller with one of said different access codes to decrypt a selected one of said encrypted data sets in response to the receipt of one of said access code identifiers; said data access controller accessing said data sets written onto said data storage means; and wherein said access codes are further stored with attributes defined in a manner which corresponds to particular properties of said data sets, both of which are transmitted to said data access controller in response to the receipt of one of said access code identifiers.
Claim 27
Dependent Claim
39 words
A method as recited in claim 23 wherein said data storage unit stores update means cooperative with said access codes for generating updated access codes for access to previously unaccessible parts of said data on said data storage unit.
Claim 28
Dependent Claim
17 words
A method as recited in claim 24 wherein said updated access codes are generated by said controller.
Claim 29
Dependent Claim
17 words
A method as recited in claim 23 wherein said attributes are representative of use of said data.
Claim 30
Independent Claim
148 words
A system for encrypting data, comprising: a memory medium including programming codes stored thereon for encrypting individual data sets and for assigning access code identifiers to said individual data sets, each of said access code identifiers associated with and used in identifying a particular access code for decrypting one of said individual data sets, said access code identifier for identifying said particular access code; a processor in communication with said memory medium for writing said encrypted individual data sets to a data storage unit so that at least some of said individual data sets are stored in conjunction with access code identifiers on said data storage unit; and a remote access code distribution controller for transferring a particular one of said access codes for use with a particular one of said portable data storage means on receipt of one of said access code identifiers from a second location.
Claim 31
Independent Claim
148 words
A system for encrypting data, comprising: a memory medium including programming codes stored thereon for encrypting individual data sets and for assigning access code identifiers to said individual data sets, each of said access code identifiers associated with and used in identifying a particular access code for decrypting one of said individual data sets, said access code identifier for identifying said particular access code; a processor in communication with said memory medium for writing said encrypted individual data sets to a data storage unit so that at least some of said individual data sets are stored in conjunction with access code identifiers on said data storage unit; and a remote access code distribution controller for transferring a particular one of said access codes for use with a particular one of said portable data storage means on receipt of one of said access code identifiers from a second location.
Claim 32
Dependent Claim
41 words
A system as recited in claim 27 wherein said data storage unit stores update means which are cooperative with said access codes for generating updated access codes for access to previously unaccessible parts of said data on said data storage unit.
Claim 33
Dependent Claim
17 words
A system as recited in claim 27 wherein said access code is further associated with an attribute.
Claim 34
Dependent Claim
18 words
A system as recited in claim 29 wherein said attribute is representative of use of said data set.
Claim 35
Independent Claim
98 words
A method for encrypting data sets to control access thereto, comprising the steps of: defining attributes in a manner which corresponds to particular properties of said data sets; binding said attributes to access codes and storing them in a first location; encoding said data sets so they may be decrypted by said access codes when said access codes signal are applied to said data sets by a processor; storing said encoded data sets on a data storage unit; transmitting to a second location from said first location one of said access codes bound to one of said attributes.
Claim 36
Independent Claim
98 words
A method for encrypting data sets to control access thereto, comprising the steps of: defining attributes in a manner which corresponds to particular properties of said data sets; binding said attributes to access codes and storing them in a first location; encoding said data sets so they may be decrypted by said access codes when said access codes signal are applied to said data sets by a processor; storing said encoded data sets on a data storage unit; transmitting to a second location from said first location one of said access codes bound to one of said attributes.
Claim 37
Dependent Claim
18 words
A method as recited in claim 31 wherein said attributes are representative of a use of said data.
Claim 38
Dependent Claim
16 words
A method as recited in claim 31 wherein said access codes are correlated with identifying codes.
Claim 39
Dependent Claim
81 words
A method as recited in claim 31 wherein access to said encoded data sets of said data storage unit is provided by a remote authorization center and further comprises the step of: providing a controller for communication with said data storage unit and wherein, upon transmitting one of said identifying codes to said remote authorization center, one of said access codes is downloaded to said controller wherein said controller provides access to said data sets stored on said data storage unit.
Claim 40
Dependent Claim
16 words
A method as recited in claim 34 wherein said controller is provided in a hardware configuration.
Claim 41
Dependent Claim
16 words
A method as recited in claim 34 wherein said controller is provided in a software configuration.
Claim 42
Dependent Claim
39 words
A method as recited in claim 34 wherein said data storage unit stores thereon means cooperative with access codes for generating updated access codes for access to previously unaccessible parts of said data stored on said data storage unit.
Claim 43
Dependent Claim
129 words
A data retrieval system-for use by a user comprising: a data storage unit including data stored thereon including portions selected by said user, said selected portions on said data storage unit being accessible by a set of access codes, wherein one of said set of access codes is transmitted by a remote central processing unit to a user at a different location, such transmitted to said user to provide access to said selected portions of said data stored on said data storage unit; and wherein said data storage unit includes update means cooperative with said transmitted access codes for automatically generating updated access codes for access to previously unaccessible parts of said selected portions of said data on said data storage unit when electronic update counter conditions are met.
Claim 44
Dependent Claim
129 words
A data retrieval system-for use by a user comprising: a data storage unit including data stored thereon including portions selected by said user, said selected portions on said data storage unit being accessible by a set of access codes, wherein one of said set of access codes is transmitted by a remote central processing unit to a user at a different location, such transmitted to said user to provide access to said selected portions of said data stored on said data storage unit; and wherein said data storage unit includes update means cooperative with said transmitted access codes for automatically generating updated access codes for access to previously unaccessible parts of said selected portions of said data on said data storage unit when electronic update counter conditions are met.
Claim 45
Dependent Claim
28 words
A system as recited in claim 38 wherein each of said access codes is correlated with an identifying code and wherein said authorization request includes said identifying code.
Claim 46
Dependent Claim
16 words
A system as recited in claim 39 wherein said identifying code is representative of an attribute.
Claim 47
Dependent Claim
18 words
A system as recited in claim 40 wherein said attribute is representative of a use of said data.
Claim 48
Dependent Claim
23 words
A system as recited in claim 38 wherein said data stored on said data storage unit includes identifying codes for identifying said data.
Claim 49
Dependent Claim
17 words
A system as recited in claim 42 wherein said identifying codes are codes are associated with attributes.
Claim 50
Dependent Claim
17 words
A system as recited in claim 43 wherein said attribute is representative of use of said data.
Claim 51
Independent Claim
82 words
A system for providing authentication of electronic transmissions, comprising: an authorization center for transmitting access codes to different locations upon receipt of authenticated requests for said access codes, wherein one of said access codes is electronically transmitted to a different location when said authenticated request meets particular electronic signature conditions; and a controller at said different location for receiving said access codes from said authorization Center, said controller capable of verifying that said access code was transmitted from said remote authorization center.
Claim 52
Independent Claim
82 words
A system for providing authentication of electronic transmissions, comprising: an authorization center for transmitting access codes to different locations upon receipt of authenticated requests for said access codes, wherein one of said access codes is electronically transmitted to a different location when said authenticated request meets particular electronic signature conditions; and a controller at said different location for receiving said access codes from said authorization Center, said controller capable of verifying that said access code was transmitted from said remote authorization center.
Claim 53
Dependent Claim
24 words
A system as recited in claim 45 wherein said access codes provide for the decryption of encrypted data stored on a data storage unit.
Claim 54
Dependent Claim
45 words
A system as recited in claim 46 wherein on said data storage unit, update means are stored, such being cooperative with said one transmitted access code for generating updated access codes for access to previously unaccessible parts of said data on said data storage unit.
Claim 55
Dependent Claim
26 words
A system as recited in claim 45 wherein said access codes are correlated with an identifying code and wherein said authenticated request includes said identifying code.
Claim 56
Dependent Claim
16 words
A system as recited in claim 48 wherein said identifying code is representative of an attribute.
Claim 57
Dependent Claim
18 words
A system as recited in claim 49 wherein said attribute is representative of a use of said data.
Claim 58
Dependent Claim
14 words
A system as recited in claim 45 wherein said controller is a hardware configuration.
Claim 59
Dependent Claim
14 words
A system as recited in claim 45 wherein said controller is a software configuration.
Claim 60
Dependent Claim
23 words
A system as recited in claim 46 wherein said data stored on said data storage unit includes identifying codes for identifying said data.
Claim 61
Dependent Claim
17 words
A system as recited in claim 53 wherein said identifying codes are codes are associated with attributes.
Claim 62
Dependent Claim
17 words
A system as recited in claim 54 wherein said attribute is representative of use of said data.
Claim 63
Independent Claim
87 words
A method for providing authentication of electronic transmissions, comprising the steps of: providing an authorization center for transmitting access codes to different locations upon receipt of authenticated requests for said access codes, wherein one of said access codes is electronically transmitted to a different location when said authenticated request meets particular electronic signature conditions; and providing a controller at said different location for receiving said access codes from said authorization center, said controller capable of verifying that said access code was transmitted from said remote authorization center.
Claim 64
Independent Claim
87 words
A method for providing authentication of electronic transmissions, comprising the steps of: providing an authorization center for transmitting access codes to different locations upon receipt of authenticated requests for said access codes, wherein one of said access codes is electronically transmitted to a different location when said authenticated request meets particular electronic signature conditions; and providing a controller at said different location for receiving said access codes from said authorization center, said controller capable of verifying that said access code was transmitted from said remote authorization center.
Claim 65
Dependent Claim
24 words
A method as recited in claim 56 wherein said access codes provide for the decryption of encrypted data stored on a data storage unit.
Claim 66
Dependent Claim
45 words
A method as recited in claim 57 wherein on said data storage unit, update means are stored, such being cooperative with said one transmitted access code for generating updated access codes for access to previously unaccessible parts of said data on said data storage unit.
Claim 67
Dependent Claim
26 words
A method as recited in claim 56 wherein said access codes are correlated with an identifying code and wherein said authenticated request includes said identifying code.
Claim 68
Dependent Claim
16 words
A method as recited in claim 59 wherein said identifying code is representative of an attribute.
Claim 69
Dependent Claim
18 words
A method as recited in claim 60 wherein said attribute is representative of a use of said data.
Claim 70
Dependent Claim
14 words
A method as recited in claim 56 wherein said controller is a hardware configuration.
Claim 71
Dependent Claim
14 words
A method as recited in claim 56 wherein said controller is a software configuration.
Claim 72
Dependent Claim
23 words
A method as recited in claim 56 wherein said data stored on said data storage unit includes identifying codes for identifying said data.
Claim 73
Dependent Claim
17 words
A method as recited in claim 64 wherein said identifying codes are codes are associated with attributes.
Claim 74
Dependent Claim
17 words
A method as recited in claim 66 wherein said attribute is representative of use of said data.
References Cited (Backward Citations)
US4888798A
Cited
US5010571A
Cited
US4827508A
Cited
US4977594A
Cited
US5050213A
Cited
US5101571A
Cited
US5457746A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2000-10-13 | 2001-04-14 | 2001-10-14 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2004-10-13 | 2005-04-14 | 2005-10-14 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2008-10-13 | 2009-04-14 | 2009-10-14 | $7700.00 | Window Closed / Lapsed |