公开(公告)号：US20060178997A1

公开(公告)日：2006-08-10

申请号：US11373156

申请日：2006-03-13

Applicant: Paul Schneck ,  Marshall Abrams

Inventor： Paul Schneck ,  Marshall Abrams

IPC: G06Q99/00

CPC classification number: G06Q99/00 ,  G06F21/10 ,  G06F21/32 ,  G06F21/34 ,  G06F21/577 ,  G06F21/6209 ,  G06F21/6245 ,  G06F21/71 ,  G06F21/72 ,  G06F21/86 ,  G06F2211/007 ,  G06F2221/0704 ,  G06F2221/0724 ,  G06F2221/0737 ,  G06F2221/0742 ,  G06F2221/0797 ,  G06F2221/2137 ,  G06F2221/2141 ,  G06F2221/2143 ,  G06F2221/2145 ,  G06F2221/2149 ,  G11B20/00673 ,  H04L9/0822 ,  H04L63/0428 ,  H04L2209/56 ,  H04L2209/60 ,  H04L2463/101

Abstract: A method and device are provided for controlling access to data. Portions of the data are protected and rules concerning access rights to the data are determined. Access to the protected portions of the data is prevented, other than in a non-useable form; and users are provided access to the data only in accordance with the rules as enforced by a mechanism protected by tamper detection. A method is also provided for distributing data for subsequent controlled use of those data. The method includes protecting portions of the data; preventing access to the protected portions of the data other than in a non-useable form; determining rules concerning access rights to the data; protecting the rules; and providing a package including: the protected portions of the data and the protected rules. A user is provided controlled access to the distributed data only in accordance with the rules as enforced by a mechanism protected by tamper protection. A device is provided for controlling access to data having protected data portions and rules concerning access rights to the data. The device includes means for storing the rules; and means for accessing the protected data portions only in accordance with the rules, whereby user access to the protected data portions is permitted only if the rules indicate that the user is allowed to access the portions of the data.

Abstract translation: 提供了一种控制对数据访问的方法和装置。 数据的部分受到保护，并且确定了关于数据访问权限的规则。 防止访问数据的受保护部分，而不是不可用的形式; 并且只能根据由篡改检测保护的机制执行的规则，向用户提供对数据的访问。 还提供了用于分发用于随后控制使用这些数据的数据的方法。 该方法包括保护数据的部分; 阻止访问受保护部分的数据，而不是不可用的形式; 确定关于数据访问权限的规则; 保护规则; 并提供一个包，包括：受保护的数据部分和受保护的规则。 只有按照由防篡改保护机制强制执行的规则，才能使用户对分布式数据进行受控访问。 提供了用于控制对具有受保护数据部分的数据的访问的设备和关于数据访问权限的规则。 该装置包括用于存储规则的装置; 以及仅根据规则访问受保护的数据部分的装置，由此仅当规则指示允许用户访问数据的部分时才允许用户访问受保护的数据部分。