US5898781A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Distributed cryptographic object method
Assignee: Tecsec Inc
•
Filing: 1997-09-10
•
Granted: 1999-04-27
•
Expires: 2017-09-10
Abstract
Abstract A system for increasing the security of a computer system, while giving an individual user a large amount of flexibility and power. To give users the most power and flexibility, a standard object that has the capability to embed objects is used. To allow users even more flexibility, a standard object tracking mechanism is used that allow users to distribute multiple encrypted embedded objects to other individuals in a single encrypted object. By effecting compartmentalization of every object by label attributes and algorithm attributes, multi-level multimedia security is achieved.
Inventors
- 👤 M. Greg Shanton
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-31 01:43
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/10; G06F12/00; G06F12/14; G06F12/1408; G06F12/1458; G06F12/1491; G06F21/60; G06F21/62; G06F21/6209; G06F21/6218; G06F21/6227; H; H04; H04L; H04L9/00; H04L9/08; H04L9/0816; H04L9/0819; H04L9/083; H04L9/088; G06F2221/00; G06F2221/21; G06F2221/2107
Claims Analysis
Total Claims: 23
Claim 1
Independent Claim
85 words
A method for providing multi-level multimedia security in a data network, comprising: A) accessing an object-oriented key manager; B) selecting a first object to encrypt; C) selecting a first label for the first object; D) selecting an encryption algorithm; E) encrypting the first object according to the encryption algorithm; F) labelling the encrypted first object; G) reading the first object label; H) determining access authorization based on the first object label; and I) allowing access to the first object only if access authorization is granted.
Claim 2
Independent Claim
85 words
A method for providing multi-level multimedia security in a data network, comprising: A) accessing an object-oriented key manager; B) selecting a first object to encrypt; C) selecting a first label for the first object; D) selecting an encryption algorithm; E) encrypting the first object according to the encryption algorithm; F) labelling the encrypted first object; G) reading the first object label; H) determining access authorization based on the first object label; and I) allowing access to the first object only if access authorization is granted.
Claim 3
Dependent Claim
22 words
The method of claim 1, further comprising embedding the encrypted first object in a second object after labelling the encrypted first object.
Claim 4
Dependent Claim
38 words
The method of claim 2, further comprising: A) selecting a second label for the second object; B) selecting an encryption algorithm; C) encrypting the second object; and D) labelling the encrypted second object with a second object label.
Claim 5
Dependent Claim
37 words
The method of claim 3, further comprising: A) reading the second object label; B) determining access authorization based on the second object label; and C) allowing access to the second object only if access authorization is granted.
Claim 6
Dependent Claim
17 words
The method of claim 4, wherein allowing access to the second object includes decrypting the second object.
Claim 7
Dependent Claim
17 words
The method of claim 4, wherein allowing access to the second object includes deleting the second object.
Claim 8
Dependent Claim
15 words
The method of claim 3, wherein the second label is a second plurality of labels.
Claim 9
Dependent Claim
21 words
The method of claim 2, wherein embedding the first encrypted object in a second object includes covering the first encrypted object.
Claim 10
Dependent Claim
65 words
The method of claim 8, further comprising: A) selecting a second label for the second object; B) selecting an encryption algorithm; C) encrypting the second object; D) labelling the second encrypted object with a second object label; E) reading the second object label; F) determining access authorization based on the second object label; and G) uncovering the second object only if access authorization is granted.
Claim 11
Dependent Claim
15 words
The method of claim 1, wherein the first label is a first plurality of labels.
Claim 12
Dependent Claim
17 words
The method of claim 1, wherein allowing access to the first object includes decrypting the first object.
Claim 13
Dependent Claim
17 words
The method of claim 1, wherein allowing access to the first object includes deleting the first object.
Claim 14
Dependent Claim
34 words
The method of claim 1, wherein labelling the encrypted first object includes attaching a file header to the first object, and allowing access to the first object includes allowing access to the file header.
Claim 15
Independent Claim
199 words
A system for providing multi-level multimedia security in a data network, comprising: 1) a system memory for storing data; 2) an encryption algorithm module, comprising logic for converting unencrypted objects into encrypted objects, the encryption algorithm module being disposed to access data stored in the system memory; 3) an object labelling subsystem, comprising logic for applying label conditions to an object, the object labelling subsystem being disposed to access data stored in the system memory and the object labelling subsystem being further disposed to accept inputs from the encryption algorithm module; 4) a decryption algorithm module, comprising logic for converting encrypted objects into unencrypted objects, the decryption algorithm module being disposed to access data stored in the system memory means; and 5) an object label identification subsystem, comprising logic for limiting object access, according to the label conditions, the object label identification subsystem being disposed to access data stored in the system memory and the object label identification subsystem being further disposed to accept inputs from the decryption algorithm module; 6) wherein the encryption algorithm module and the object labelling subsystem together create an encrypted object such that the object label identification subsystem limits access to the encrypted object.
Claim 16
Independent Claim
199 words
A system for providing multi-level multimedia security in a data network, comprising: 1) a system memory for storing data; 2) an encryption algorithm module, comprising logic for converting unencrypted objects into encrypted objects, the encryption algorithm module being disposed to access data stored in the system memory; 3) an object labelling subsystem, comprising logic for applying label conditions to an object, the object labelling subsystem being disposed to access data stored in the system memory and the object labelling subsystem being further disposed to accept inputs from the encryption algorithm module; 4) a decryption algorithm module, comprising logic for converting encrypted objects into unencrypted objects, the decryption algorithm module being disposed to access data stored in the system memory means; and 5) an object label identification subsystem, comprising logic for limiting object access, according to the label conditions, the object label identification subsystem being disposed to access data stored in the system memory and the object label identification subsystem being further disposed to accept inputs from the decryption algorithm module; 6) wherein the encryption algorithm module and the object labelling subsystem together create an encrypted object such that the object label identification subsystem limits access to the encrypted object.
Claim 17
Dependent Claim
22 words
The system of claim 14, wherein the data processor further comprises embedding logic for embedding a first object within a second object.
Claim 18
Dependent Claim
22 words
The system of claim 15, wherein the data processor further comprises covering logic for covering the first object with the second object.
Claim 19
Dependent Claim
19 words
The system of claim 16, wherein the logic for limiting object access includes logic to uncover the first object.
Claim 20
Independent Claim
125 words
A system for providing multi-level multimedia security in a data network, comprising: A) means for accessing an object-oriented key manager; B) means for selecting a first object to encrypt; C) means for selecting a label for the first object; D) means for selecting an encryption algorithm; E) means for encrypting the first object; F) means for embedding the first object within a second object; G) means for labelling the encrypted first object; H) means for reading the label; I) means for determining access authorization based on the label; and J) means for accessing the first object only if access authorization is granted; K) the means for embedding the first object within a second object including means for covering the first object with a second object.
Claim 21
Independent Claim
125 words
A system for providing multi-level multimedia security in a data network, comprising: A) means for accessing an object-oriented key manager; B) means for selecting a first object to encrypt; C) means for selecting a label for the first object; D) means for selecting an encryption algorithm; E) means for encrypting the first object; F) means for embedding the first object within a second object; G) means for labelling the encrypted first object; H) means for reading the label; I) means for determining access authorization based on the label; and J) means for accessing the first object only if access authorization is granted; K) the means for embedding the first object within a second object including means for covering the first object with a second object.
Claim 22
Dependent Claim
74 words
The system of claim 18, further comprising: A) means for selecting the second object to encrypt; B) means for selecting a second label for the second object; C) means for encrypting the second object; D) means for labelling the encrypted second object; E) means for reading the second label; F) means for determining access authorization based on the second label; and G) means for accessing the second object only if access authorization is granted.
Claim 23
Dependent Claim
20 words
The system of claim 19, wherein the means for accessing the second object includes means for uncovering the first object.
References Cited (Backward Citations)
US4218582A
Cited
US4405829A
Cited
US4424414A
Cited
US4713753A
Cited
US4864616A
Cited
US4955082A
Cited
US4984272A
Cited
US4962533A
Cited
US5191611A
Cited
US5065429A
Cited
US5052040A
Cited
US5204961A
Cited
US5369707A
Cited
US5369702A
Cited
US5680452A
Cited
US5717755A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2002-04-26 | 2002-10-26 | 2003-04-27 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2006-04-26 | 2006-10-26 | 2007-04-27 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2010-04-26 | 2010-10-26 | 2011-04-27 | $7700.00 | Window Closed / Lapsed |