Patent US2425270A successfully refreshed from Google Patents.
US5680452A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Distributed cryptographic object method
Assignee: Tecsec Inc
•
Filing: 1995-02-24
•
Granted: 1997-10-21
•
Expires: 2015-02-24
Abstract
Abstract A system for increasing the security of a computer system, while giving an individual user a large amount of flexibility and power. To give users the most power and flexibility, a standard object that has the capability to embed objects is used. To allow users even more flexibility, a standard object tracking mechanism is used that allows users to distribute to other individuals multiple encrypted objects embedded in a single encrypted object. By effecting compartmentalization of every object by label attributes and algorithm attributes, multi-level multimedia security is achieved. Label attributes are used to restrict access to objects based on location, group, or other criteria and may specify personal access. Access type, such as read-only, write-only, and print-only may be specified. Nested embedded objects may be accessed directly through selection from a header array.
Inventors
- 👤 M. Greg Shanton
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-26 13:10
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/10; G06F12/00; G06F12/14; G06F12/1408; G06F12/1458; G06F12/1491; G06F21/60; G06F21/62; G06F21/6209; G06F21/6218; G06F21/6227; G06F2221/00; G06F2221/21; G06F2221/2107
Claims Analysis
Total Claims: 19
Claim 1
Independent Claim
81 words
A method for providing multi-level multimedia security in a data network, comprising: a) accessing an object-oriented key manager; b) selecting a first object to encrypt; c) selecting a first label for the first object; d) encrypting the first object; e) labelling the encrypted first object; f) displaying the first label as a header array; g) reading the first object label; h) determining access authorization based on the first object label; and i) decrypting the first object if access authorization is granted.
Claim 2
Independent Claim
81 words
A method for providing multi-level multimedia security in a data network, comprising: a) accessing an object-oriented key manager; b) selecting a first object to encrypt; c) selecting a first label for the first object; d) encrypting the first object; e) labelling the encrypted first object; f) displaying the first label as a header array; g) reading the first object label; h) determining access authorization based on the first object label; and i) decrypting the first object if access authorization is granted.
Claim 3
Dependent Claim
22 words
The method of claim 1, further comprising embedding the encrypted first object in a second object after labelling the encrypted first object.
Claim 4
Dependent Claim
42 words
The method of claim 2, further comprising: a) selecting a second label for the second object; b) encrypting the second object; c) labelling the encrypted second object with a second object label; and d) incorporating the second label into the header array.
Claim 5
Dependent Claim
33 words
The method of claim 3, further comprising: a) reading the header array; b) determining access authorization based on the second object label; and c) decrypting the second object if access authorization is granted.
Claim 6
Dependent Claim
26 words
The method of claim 4, further comprising presenting a representation of the first object only if access authorization is granted according to the second object label.
Claim 7
Dependent Claim
14 words
The method of claim 2, wherein the encrypted first object is a printer object.
Claim 8
Dependent Claim
48 words
The method of claim 1, wherein the first object is an application document, and further comprising: a) creating the first object in an application prior to accessing the object-oriented key manager; and b) returning the encrypted first object to the application prior to reading the first object label.
Claim 9
Dependent Claim
11 words
The method of claim 7, wherein access authorization is print-only authorization.
Claim 10
Dependent Claim
29 words
The method of claim 1, further comprising: a) compressing the first object prior to encrypting the first object; and b) decompressing the first object after decrypting the first object.
Claim 11
Dependent Claim
31 words
The method of claim 1, further comprising: a) compressing the first object immediately prior to encrypting the first object; and b) decompressing the first object immediately after decrypting the first object.
Claim 12
Dependent Claim
74 words
The method of claim 1, further comprising: a) arranging a plurality of encrypted objects such that at least some of the plurality of encrypted objects are embedded within others of the encrypted objects; b) selecting a label for each of at least some of the plurality of encrypted objects; c) labelling each of the plurality of encrypted objects for which a label was selected; d) incorporating each of the labels into the header array.
Claim 13
Dependent Claim
56 words
The method of claim 11, further comprising: a) reading a selected label; b) determining access authorization to the object associated with the selected label based on the selected label and further based on all labels associated with objects in which the associated object is embedded; and c) decrypting the associated object if access authorization is granted.
Claim 14
Dependent Claim
20 words
The method of claim 1, wherein the header array is an access control list separate from the encrypted first object.
Claim 15
Independent Claim
301 words
A system for providing multi-level multimedia security in a data network, comprising: A) digital logic means, the digital logic means comprising: 1) a system memory means for storing data; 2) an encryption algorithm module, comprising logic for converting unencrypted objects into encrypted objects, the encryption algorithm module being electronically connected to the system memory means for accessing data stored in the first system memory; 3) means for arranging a plurality of encrypted objects such that at least some of the plurality of encrypted objects are embedded within others of the encrypted objects; 4) an object labelling subsystem, comprising logic means for limiting object access, subject to label conditions of a selected object and further subject to conditions of all labels associated with objects in which the selected object is embedded, the object labelling subsystem being electronically connected to the system memory means for accessing data stored in the system memory means and the object labelling subsystem being further electronically connected to the encryption algorithm module to accept inputs from the encryption algorithm module; 5) a decryption algorithm module, comprising logic for converting encrypted objects into unencrypted objects, the decryption algorithm module being electronically connected to the system memory means for accessing data stored in the system memory means; and 6) an object label identification subsystem, comprising logic for limiting object access, subject to label conditions, the object label identification subsystem being electronically connected to the system memory means for accessing data stored in the system memory means and the object label identification subsystem being further electronically connected to the decryption algorithm module to accept inputs from the deception algorithm module. B) the encryption algorithm module working in conjunction with the object labelling subsystem to create an encrypted object such that the object label identification subsystem limits access to an encrypted object.
Claim 16
Independent Claim
301 words
A system for providing multi-level multimedia security in a data network, comprising: A) digital logic means, the digital logic means comprising: 1) a system memory means for storing data; 2) an encryption algorithm module, comprising logic for converting unencrypted objects into encrypted objects, the encryption algorithm module being electronically connected to the system memory means for accessing data stored in the first system memory; 3) means for arranging a plurality of encrypted objects such that at least some of the plurality of encrypted objects are embedded within others of the encrypted objects; 4) an object labelling subsystem, comprising logic means for limiting object access, subject to label conditions of a selected object and further subject to conditions of all labels associated with objects in which the selected object is embedded, the object labelling subsystem being electronically connected to the system memory means for accessing data stored in the system memory means and the object labelling subsystem being further electronically connected to the encryption algorithm module to accept inputs from the encryption algorithm module; 5) a decryption algorithm module, comprising logic for converting encrypted objects into unencrypted objects, the decryption algorithm module being electronically connected to the system memory means for accessing data stored in the system memory means; and 6) an object label identification subsystem, comprising logic for limiting object access, subject to label conditions, the object label identification subsystem being electronically connected to the system memory means for accessing data stored in the system memory means and the object label identification subsystem being further electronically connected to the decryption algorithm module to accept inputs from the deception algorithm module. B) the encryption algorithm module working in conjunction with the object labelling subsystem to create an encrypted object such that the object label identification subsystem limits access to an encrypted object.
Claim 17
Dependent Claim
24 words
The system of claim 14, wherein the digital logic means further comprises means for accessing computer program applications stored in the system memory means.
Claim 18
Dependent Claim
15 words
The system of claim 14, wherein one of the encrypted objects is a printer object.
Claim 19
Dependent Claim
24 words
The system of claim 14, further comprising means for compressing one of the encrypted objects and means for decompressing one of the encrypted objects.
References Cited (Backward Citations)
US4218582A
Cited
US4405829A
Cited
US4424414A
Cited
US4713753A
Cited
US4864616A
Cited
US4955082A
Cited
US4984272A
Cited
US4962533A
Cited
US5065429A
Cited
US5191611A
Cited
US5052040A
Cited
US5204961A
Cited
US5369707A
Cited
US5369702A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2000-10-20 | 2001-04-21 | 2001-10-21 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2004-10-20 | 2005-04-21 | 2005-10-21 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2008-10-20 | 2009-04-21 | 2009-10-21 | $7700.00 | Window Closed / Lapsed |