Data security system and method with parsing and dispersion techniques
A data security having parsing and dispersion aspects enables the user to parse, disperse and reconstruct the original, plain text data or data object, thereby enabling secure storage of the data. The original data may be maintained in its original state, encrypted or it may be destroyed. For example, financial data maintained by an institute, stored as is customary, be parsed with an algorithm, the parsed segments dispersed off-site (that is, separated and stored in extract and remainder stores or computer memories) and away from the financial institute, and, upon appropriate security clearance, the dispersed data can be reconstructed to duplicate the data. Large distribution of parsed data is contemplated by the system. The original data remains stable, operable and immediately useful in its customary storage location (or alternatively destroyed). The secured dispersed data is a back-up of the original data.
1. A method of securing data having one or more security sensitive words, characters or icons in a computer system with a plurality of physically distinguishable memories respectively designated as a remainder store and a plurality of physically distinct extract stores corresponding to a plurality of security levels for respective subsets of said security sensitive words, characters or icons comprising:
extracting said security sensitive words, characters or icons from said data to obtain extracted data and remainder data therefrom;
storing said extracted data and said remainder data in said respective extract stores corresponding to an associated security level and said remainder store, respectively; and,
permitting full or partial reconstruction of said data via said extracted data from respective extract stores and remainder data only in the presence of a predetermined security clearance corresponding to said associated security level for said respective extract stores.
2. A method as claimed in claim 1 including filtering said data while extracting.
3. A method as claimed in claim 2 including defining a plurality of filters for said respective subsets of security sensitive words, characters or icons and the method includes one of storing or destroying one or more of said plurality of filters after storing said extracted data.
4. A method as claimed in claim 3 including encrypting one or both of said extracted data and said remainder data.
5. A method as claimed in claim 4 wherein the step of permitting reconstruction includes decrypting one or both of said extracted data and remainder data.
6. A method as claimed in claim 1 including establishing a plurality of security levels each with a respective security clearance, each said subset of said security sensitive words, characters or icons being correlated with said plurality of security levels and the step of permitting reconstruction including the step of permitting a plurality of partial reconstructions of said data in the presence of respective ones of said plurality of security clearance levels.
7. A method as claimed in claim 1 including displaying an advertisement prior to one or the other or both of said steps of extracting and permitting reconstruction.
8. A method as claimed in claim 7 including providing a hyperlink to a vendor's web site with said advertisement.
9. A method as claimed in claim 1 including assessing a charge for extracting, storing or permitting reconstruction.
10. A method of securing data with a parsing algorithm via a computer system having physically distinguishable memories designated as a remainder store and a plurality of physically distinct extract stores corresponding to a plurality of security levels for respective subsets of said security sensitive words, characters or icons comprising:
parsing said data to obtain extracted data for respective associated security levels and remainder data therefrom;
storing said extracted data and said remainder data in said extract stores and said remainder store, respectively; and,
permitting full or partial reconstruction of said data via said extracted data from said respective extract stores and remainder data only in the presence of a predetermined security clearance corresponding to said associated security level for said respective extract stores.
11. A method as claimed in claim 10 wherein the step of parsing parses the data granularly.
12. A method as claimed in claim 10 wherein the step of parsing uses said parsing algorithm which is based on one or more of a bit count, a word, a word count, a page count, a line count, a paragraph count, an identifiable document characteristic, an identifiable word characteristic, an identifiable icon characteristic, an identifiable data object characteristic, capital letters, italics, and underline.
13. A method as claimed in claim 10 wherein said data is financial data and the step of parsing uses said parsing algorithm based upon one of characters in said data and character count in said data.
14. A method as claimed in claim 10 including establishing a plurality of security levels each with a respective security clearance, permitting increasingly greater reconstruction if said data being correlated with increasingly higher levels of said plurality of security levels includes greater security level clearances, and the step of permitting reconstruction including the step of permitting a plurality of partial reconstructions of said data in the presence of respective ones of said plurality of security clearance levels.
15. A method as claimed in claim 10 including a further data security step of one from the group of storing said data without encryption, storing said data with encryption and destroying said data; said further data security step being independent of said parsing, storing and permitting reconstruction.
16. A computer readable storage medium encoded with programming instructions for securing data having one or more security sensitive words, characters or icons in a computer system with a plurality physically distinguishable memories respectively designated as a remainder store and a plurality of physically distinct extract stores corresponding to a plurality of security levels for respective subsets of said security sensitive words, characters or icons comprising:
extracting said security sensitive words, characters or icons from said data to obtain extracted data and remainder data therefrom;
storing said extracted data and said remainder data in said respective extract stores corresponding to an associated security level and said remainder store, respectively; and,
permitting full or partial reconstruction of said data via said extracted data from respective extract stores and remainder data only in the presence of a predetermined security clearance corresponding to said associated security level for said respective extract stores.
17. A storage medium with programming instructions as claimed in claim 16 including filtering said data while extracting.
18. A storage medium with programming instructions as claimed in claim 16 including defining a plurality of filters for respective subsets of security sensitive words, characters or icons and includes one of storing or destroying one or more of said plurality of filters after storing said extracted data.
19. A storage medium with programming instructions as claimed in claim 18 including encrypting one or both of said extracted data and said remainder data.
20. A storage medium with programming instructions as claimed in claim 19 wherein the step of permitting reconstruction includes decrypting one or both of said extracted data and remainder data.
21. A storage medium with programming instructions as claimed in claim 16 including establishing a plurality of security levels each with a respective security clearance, each said subset of said security sensitive words, characters or icons being correlated with said plurality of security levels and the step of permitting reconstruction including the step of permitting a plurality of partial reconstructions of said data in the presence of respective ones of said plurality of security clearance levels.
22. A computer readable storage medium encoded with programming instructions for securing data with a parsing algorithm via a computer system having physically distinguishable memories designated as a remainder store and a plurality of physically distinct extract stores corresponding to a plurality of security levels for respective subsets of said security sensitive words, characters or icons comprising:
parsing said data to obtain extracted data for respective associated security levels and remainder data therefrom;
storing said extracted data and said remainder data in said respective extract stores and said remainder store, respectively; and,
permitting full or partial reconstruction of said data via said extracted data from said respective extract stores and remainder data only in the presence of a predetermined security clearance corresponding to said associated security level for said respective extract stores.
23. A storage medium with programming instructions as claimed in claim 22 wherein the step of parsing parses the data granularly.
24. A storage medium with programming instructions as claimed in claim 22 wherein the step of parsing uses said parsing algorithm which is based on one or more of a bit count, a word, a word count, a page count, a line count, a paragraph count, an identifiable document characteristic, an identifiable word characteristic, an identifiable icon characteristic, an identifiable data object characteristic, capital letters, italics, and underline.
25. A storage medium with programming instructions as claimed in claim 22 wherein said data is financial data and the step of parsing uses said parsing algorithm based upon one of characters in said data and character count in said data.
26. A storage medium with programming instructions as claimed in claim 22 including establishing a plurality of security levels each with a respective security clearance, permitting increasingly greater reconstruction if said data being correlated with increasingly higher levels of said plurality of security levels includes greater security level clearances, and the step of permitting reconstruction including the step of permitting a plurality of partial reconstructions of said data in the presence of respective ones of said plurality of security clearance levels.
27. A storage medium as claimed in claim 22 including a further data security step of one from the group of storing said data without encryption, storing said data with encryption and destroying said data; said further data security step being independent of said parsing, storing and permitting reconstruction.