GB2550557A - Data management system and method - Google Patents
Data management system and method Download PDFInfo
- Publication number
- GB2550557A GB2550557A GB1608642.3A GB201608642A GB2550557A GB 2550557 A GB2550557 A GB 2550557A GB 201608642 A GB201608642 A GB 201608642A GB 2550557 A GB2550557 A GB 2550557A
- Authority
- GB
- United Kingdom
- Prior art keywords
- data
- document
- management system
- encrypted
- data management
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Withdrawn
Links
- 238000013523 data management Methods 0.000 title claims abstract description 95
- 238000000034 method Methods 0.000 title claims abstract description 73
- 238000000638 solvent extraction Methods 0.000 claims abstract description 19
- 238000004891 communication Methods 0.000 claims description 20
- 238000012545 processing Methods 0.000 claims description 7
- 238000013473 artificial intelligence Methods 0.000 claims description 6
- 238000004590 computer program Methods 0.000 claims description 4
- 238000004458 analytical method Methods 0.000 abstract 1
- 238000007726 management method Methods 0.000 description 5
- 238000013459 approach Methods 0.000 description 3
- 238000010586 diagram Methods 0.000 description 3
- 238000012795 verification Methods 0.000 description 3
- 238000013500 data storage Methods 0.000 description 2
- 238000012544 monitoring process Methods 0.000 description 2
- 238000012552 review Methods 0.000 description 2
- 241000700605 Viruses Species 0.000 description 1
- 235000014510 cooky Nutrition 0.000 description 1
- 238000007418 data mining Methods 0.000 description 1
- 230000014509 gene expression Effects 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 238000012806 monitoring device Methods 0.000 description 1
- 238000012546 transfer Methods 0.000 description 1
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q50/00—Information and communication technology [ICT] specially adapted for implementation of business processes of specific business sectors, e.g. utilities or tourism
- G06Q50/10—Services
- G06Q50/18—Legal services
- G06Q50/184—Intellectual property management
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
- G06F21/6209—Protecting access to data via a platform, e.g. using keys or access control rules to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q10/00—Administration; Management
- G06Q10/10—Office automation; Time management
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/2107—File encryption
Landscapes
- Engineering & Computer Science (AREA)
- Business, Economics & Management (AREA)
- Tourism & Hospitality (AREA)
- Theoretical Computer Science (AREA)
- Entrepreneurship & Innovation (AREA)
- Human Resources & Organizations (AREA)
- Strategic Management (AREA)
- General Physics & Mathematics (AREA)
- Physics & Mathematics (AREA)
- General Business, Economics & Management (AREA)
- Technology Law (AREA)
- Operations Research (AREA)
- Marketing (AREA)
- Economics (AREA)
- Health & Medical Sciences (AREA)
- General Health & Medical Sciences (AREA)
- Data Mining & Analysis (AREA)
- Quality & Reliability (AREA)
- Primary Health Care (AREA)
- Bioethics (AREA)
- Software Systems (AREA)
- General Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Hardware Design (AREA)
- Storage Device Security (AREA)
Abstract
A data management system 10 and method for handling patent documents between a plurality of user devices 110, 112 and comprises three security levels, L1, L2 and L3, each offering a different degree of security. The system receives a first document containing patent information from an inventor, and sets a highest security level of encryption L3 to the first document to generate a first encrypted document. A patent attorney creates a second document using information derived from the first document and/or first encrypted document. The second document is sent to at least one patent office as a patent application, and applies a second security level of encryption L2 to the second document to generate a second encrypted document. The system is set to retrieve and analyse publication information about the patent application, and once the application is published, a lowest level of encryption L1 is applied to the second document to create a third encrypted document. The encryption method may comprise partitioning data file into a plurality of data blocks, encrypting the data blocks and obfuscating the data blocks by swapping data. A data map is also generated to aid decryption.
Description
DATA MANAGEMENT SYSTEM AND METHOD Technical Field
The present disclosure relates to data management systems, for example to data management systems that are operable to communicate various mutually different types of data and/or mutually different security classifications of data via a data communication network. Moreover, the present disclosure concerns methods of operating aforementioned data management systems, for example to methods of operating data management systems for communicating various mutually different types of data mutually different security classifications of data via a data communication network. Yet additionally, the present disclosure is concerned with computer program products comprising a non-transitory computer-readable storage medium having computer-readable instructions stored thereon, the computer-readable instructions being executable by a computerized device comprising processing hardware to execute aforesaid methods.
Background
Conventionally, when designing and operating data distribution systems, there arises a need to manage rights associated with document, and also security levels associated with such documents. It is conventional practice to devise data management systems employing varying degrees of encryption, with appropriate related encryption keys selectively distributed within the data management systems; the encryption keys ensure security, and distribution of the encryption keys controls which users have access to encrypted documents. Such considerations pertain to any large organisation that is required to distribute commercially sensitive proprietary confidential information, as well as managing intellectual property documents, for example during a lifetime of a given patent application from generating an initial invention report, filing the given patent application , prosecuting the given patent application through substantive examination, and finally maintaining patent rights generated at conclusion of substantive examination of the given patent application.
One conventional way to secure documents is to use passwords in respect of the documents. Such an approach using passwords is problematic since there is need to distribute and manage the passwords. An alternative known way is to use encryption techniques in a server, as aforementioned, wherein the documents are stored in the server and access to the documents as encrypted data is provided via a secure connection layer of a data management system.
When creating confidential documents, there is need to protect the documents, so that unwanted novelty-prejudicial disclosures to third parties does not occur.
Encrypting and decrypting documents in a server system and/or in a target user device requires key management and also data processing capacity in computing hardware. Typically, encrypted documents require more data storage capacity in hard disc than required to store corresponding non-encrypted documents. Such data storage can potentially be considerable; for example, patent-related documents for a modest-sized intellectual property consultancy firm can approach 10 to 100 Terabytes (TB).
Summary
The present disclosure seeks to provide a data management system that allows for documents to be sent In a more secure manner to selected authorized users.
Moreover, the present disclosure seeks to provide a method of operating a data management system that allows for documents to be sent in a more secure manner to selected authorized users.
According to a first aspect, there is provided a data management system for handling one or more documents between a plurality of user devices, wherein the data management system is operable to manage security levels (LI, L2, L3) in respect of the one or more documents, characterized in that the data management system is operable: (i) to receive a first document; (ii) to set a first level of security (L3) for the first document to generate a corresponding first encrypted document; (iii) to create a second document using information derived from the first encrypted document and/or from the first document; (iv) to send the second document to at least one patent office; (v) to set a second level of security (L2) for the second document to create a corresponding second encrypted document; (vi) to retrieve publication information related to the second document from the at least one patent office; and (vii) to analyze the publication information and setting a third level (LI) of security to the second encrypted document in an event that the publication information indicates that the second document is public to create a third encrypted document.
The invention is of advantage in that it is capable of providing for more reliable security management of documents, and provides for more efficient generation, revision and filing of documents with document receiving authorities, for example one or more patent offices.
Optionally, the data management system includes a server arrangement for storing document and encrypted documents, wherein the server arrangement is coupled to the plurality of user devices via a data communication network arrangement.
Optionally, the data management system is operable to use one or more encryption keys that are communicated to or generated by the user devices for encrypting and/or decrypting documents.
Optionally, the data management system is operable to employ an encryption method including partitioning one or more data files Into a plurality of data blocks, to encrypt the data blocks to generate corresponding encrypted data blocks and to obfuscate the encrypted data blocks by mutually swapping data therebetween to generate corresponding encrypted data, wherein a data map is also generated to define partitioning, encryption and obfuscation employed to generate the corresponding encrypted data to enable the encrypted data to be subsequently de-obfuscated, decrypted and de-partitioned to regenerate corresponding decrypted data of the one or more data files.
More optionally, in the data management system, the data map is communicated in encrypted form within the data management system.
Optionally, in the data management system, the user devices are provided with detectors for detecting malware present in the users devices that is capable of circumventing encryption of data executed by the user devices.
Optionally, the data management system is configured for drafting revising and submitting patent application documents to one or more patent offices.
Optionally, the data management system is operable to employ one or more artificial intelligence algorithms to analyze the publication information and/or to control the levels of security of the data management system.
According to a second aspect, there is provided a method of operating a data management system for handling one or more documents between a plurality of user devices, wherein the data management system is operable to manage security levels (LI, L2, L3) in respect of the one or more documents, characterized in that the method includes: (i) receiving a first document; (ii) setting a first level of security (L3) for the first document to generate a corresponding first encrypted document; (iii) creating a second document using information derived from the first encrypted document and/or from the first document; (iv) sending the second document to at least one patent office; (v) setting a second level of security (L2) for the second document to create a corresponding second encrypted document; (vi) retrieving publication information related to the second document from the at least one patent office; and (vii) analyzing the publication information and setting a third level (LI) of security to the second encrypted document in an event that the publication information indicates that the second document is public to create a third encrypted document.
Optionally, the method includes arranging for the data management system to include a server arrangement for storing document and encrypted documents, wherein the server arrangement is coupied to the plurality of user devices via a data communication network arrangement.
Optionally, the method includes arranging for the data management system to use one or more encryption keys that are communicated to or generated by the user devices for encrypting and/or decrypting documents.
Optionally, the method includes arranging for the data management system to employ an encryption method including partitioning one or more data files into a plurality of data blocks, to encrypt the data blocks to generate corresponding encrypted data blocks and to obfuscate the encrypted data blocks by mutually swapping data therebetween to generate corresponding encrypted data, wherein a data map is also generated to define partitioning, encryption and obfuscation employed to generate the corresponding encrypted data to enable the encrypted data to be subsequently de-obfuscated, decrypted and de-partitloned to regenerate corresponding decrypted data of the one or more data files.
More optionally, the method includes communicating the data map in encrypted form within the data management system.
Optionally, the method Includes providing the user devices with detectors for detecting malware present In the users devices that Is capable of circumventing encryption of data executed by the user devices.
Optionally, the method Includes arranging for the data management system to be configured for drafting revising and submitting patent application documents to one or more patent offices.
Optionally, the method Includes arranging for the data management system (10) to employ one or more artificial intelligence algorithms to analyze the publication information and/or to control the levels of security of the data management system.
According to a third aspect, there is provided a computer program product comprising a non-transitory computer-readable storage medium having computer-readable instructions stored thereon, the computer-readable instructions being executable by a computerized device comprising processing hardware to execute a method of the second aspect.
It will be appreciated that features of the invention are susceptible to being combined in various combinations without departing from the scope of the invention as defined by the appended claims.
Description of the diagrams
Embodiments of the present invention will now be described, by way of example only, with reference to the following diagrams wherein: FIG. 1 is a schematic illustration of a data management system pursuant to the present disclosure; and FIG. 2 is a flow chart depicted steps of a method of operating the data management system of FIG. 1.
In the accompanying diagrams, an underlined number is employed to represent an item over which the underlined number is positioned or an item to which the underlined number is adjacent. A non-underlined number relates to an item identified by a line linking the non-underlined number to the item. When a number is non-underlined and accompanied by an associated arrow, the non-underlined number is used to identify a general item at which the arrow is pointing.
Description of embodiments
According to a first aspect, there is provided a data management system for handling one or more documents between a plurality of user devices, wherein the data management system is operable to manage security levels (LI, L2, L3) in respect of the one or more documents, characterized in that the data management system is operable: (i) to receive a first document; (ii) to set a first level of security (L3) for the first document to generate a corresponding first encrypted document; (iii) to create a second document using information derived from the first encrypted document and/or from the first document; (iv) to send the second document to at least one patent office; (v) to set a second level of security (L2) for the second document to create a corresponding second encrypted document; (vi) to retrieve publication information related to the second document from the at least one patent office; and (vii) to analyze the publication information and setting a third level (LI) of security to the second encrypted document in an event that the publication information indicates that the second document is public to create a third encrypted document.
The invention is of advantage in that it is capable of providing for more reliable security management of documents, and provides for more efficient generation, revision and filing of documents with document receiving authorities, for example one or more patent offices.
Optionally, the data management system includes a server arrangement for storing document and encrypted documents, wherein the server arrangement is coupled to the plurality of user devices via a data communication network arrangement.
Optionally, the data management system is operable to use one or more encryption keys that are communicated to or generated by the user devices for encrypting and/or decrypting documents.
Optionally, the data management system is operable to employ an encryption method including partitioning one or more data files into a plurality of data blocks, to encrypt the data blocks to generate corresponding encrypted data blocks and to obfuscate the encrypted data blocks by mutually swapping data therebetween to generate corresponding encrypted data, wherein a data map is aiso generated to define partitioning, encryption and obfuscation employed to generate the corresponding encrypted data to enabie the encrypted data to be subsequentiy de-obfuscated, decrypted and de-partitioned to regenerate corresponding decrypted data of the one or more data fiies.
More optionaiiy, in the data management system, the data map is communicated in encrypted form within the data management system.
Optionaiiy, in the data management system, the user devices are provided with detectors for detecting maiware present in the users devices that is capable of circumventing encryption of data executed by the user devices.
Optionaiiy, the data management system is configured for drafting revising and submitting patent appiication documents to one or more patent offices.
Optionaiiy, the data management system is operable to employ one or more artificial intelligence algorithms to analyze the publication information and/or to controi the ievels of security of the data management system.
According to a second aspect, there is provided a method of operating a data management system for handling one or more documents between a plurality of user devices, wherein the data management system is operabie to manage security leveis (LI, L2, L3) in respect of the one or more documents, characterized in that the method includes: (i) receiving a first document; (ii) setting a first level of security (L3) for the first document to generate a corresponding first encrypted document; (iii) creating a second document using information derived from the first encrypted document and/or from the first document; (iv) sending the second document to at least one patent office; (v) setting a second level of security (L2) for the second document to create a corresponding second encrypted document; (vi) retrieving publication information related to the second document from the at least one patent office; and (vii) analyzing the publication information and setting a third level (LI) of security to the second encrypted document in an event that the publication information indicates that the second document is public to create a third encrypted document.
Optionally, the method includes arranging for the data management system to include a server arrangement for storing document and encrypted documents, wherein the server arrangement is coupled to the plurality of user devices via a data communication network arrangement.
Optionally, the method includes arranging for the data management system to use one or more encryption keys that are communicated to or generated by the user devices for encrypting and/or decrypting documents.
Optionally, the method includes arranging for the data management system to employ an encryption method including partitioning one or more data files into a plurality of data blocks, to encrypt the data blocks to generate corresponding encrypted data blocks and to obfuscate the encrypted data blocks by mutually swapping data therebetween to generate corresponding encrypted data, wherein a data map is also generated to define partitioning, encryption and obfuscation employed to generate the corresponding encrypted data to enable the encrypted data to be subsequently de-obfuscated, decrypted and de-partitioned to regenerate corresponding decrypted data of the one or more data files.
More optionally, the method includes communicating the data map in encrypted form within the data management system.
Optionally, the method includes providing the user devices with detectors for detecting malware present in the users devices that is capable of circumventing encryption of data executed by the user devices.
Optionally, the method includes arranging for the data management system to be configured for drafting revising and submitting patent application documents to one or more patent offices.
Optionally, the method Includes arranging for the data management system (10) to employ one or more artificial Intelligence algorithms to analyze the publication information and/or to control the levels of security of the data management system.
According to a third aspect, there is provided a computer program product comprising a non-transitory computer-readable storage medium having computer-readable Instructions stored thereon, the computer-readable Instructions being executable by a computerized device comprising processing hardware to execute a method of the second aspect.
In overview, the present disclosure Is concerned with data management systems, more particularly to data management systems that are operable to manage communication of Intellectual property documents from and to one or more users of the data management system. The data management system is conveniently, for example, hosted via the Internet operating pursuant to TCP/IP, although not limited thereto; for example, embodiments of the present disclosure can be Implemented on custom data communication networks, for example secure data communication network supported via the Internet, for example data communication networks to a security standard approaching a one-time pad or quantum computing level security. For example, embodiments of the present disclosure are capable of preventing eavesdropping by rogue and corrupt governmental organisations, as well as spying by rogue and corrupt corporate organisations.
Thus, the present disclosure Is concerned with data management systems for managing document rights and security levels. Moreover, embodiments of the present disclosure are concerned with methods of managing patent and other intellectual property documents during a lifetime of one or more patent applications from generating one or more initial invention reporting progression of the one or more patent applications, filing the one or more patent applications, prosecution the one or more patent applications and maintaining patent rights granted in respect of the one or more patent applications. In such a scenario, it will be appreciated that the data management system Is a hierarchical/layered security system, wherein one or more security levels change depending on a stage of a given patent appiication in its substantive examination and granting process; such change arises, for exampie, on account of patent applications being published circa 18 months after their earliest priority date (Art 4A/C Paris Convention) and thereby becoming publicly-accessible documents.
Fig. 1 is an illustration of a data management system of the present disclosure, indicated generally by 10; the illustration corresponds to a high level system. A first user terminal 110 of the data management system 10 is used by an inventor. A second user terminal 122 of the data management system 10 is used by a patent attorney. The user terminals 1001 122 can be laptop, smart phone, web pad, phablets or similar computing device having a graphical user interface (GUI). An intellectual property management system (IPMS) 120 is implemented as a server arrangement, for example including one or more servers, a cioud computing service, and similar. A patent office database system (IPODB) 120 is impiemented as one or more servers operated by a patent office; optionaiiy, the patent office database system (IPODB) 120 corresponds to a piurality of patent offices. The user terminais 110, 112 can connect to the IMPS 120 and IPODB 122 via a data communication network 130, for example via the Internet operating pursuant to TCP/IP or via a wireiess teiephone network.
The data management system 10 empioys a method of operation that enables documents to be amended, communicated secureiy and seiectiveiy exchanged between user terminais of the data management system 10. The method inciudes steps as depicted in FIG. 2, and is indicated generaiiy by 200.
In a step SI.2 of the method 200, the inventor writes an invention disclosure and uploads it via the data communication network 130 to the intellectual property management system (IPMS) 122 over a secured communication channei such as HTTPS (hyper text transfer protocoi secure).
Aiternativeiy, other types of secure channels can be employed, for example a communication channel arrangement that achieves a high degree of data security by employing partitioning of data files into corresponding data blocks, encrypting the data blocks to provide corresponding encrypted data blocks, and then obfuscating the encrypted data blocks by mutually swapping data therebetween; data block partitioning employed, encryption methods employed and obfuscation methods employed are recorded in a data map that is heavily encrypted within the data management system 10, wherein the data map enables the data files to be regenerated when the encrypted data map, and the obfuscated encrypted data blocks are received. Moreover, the user terminals 110, 112 are provided with malware protection monitoring devices that prevents malware from being active in the user terminals 110, 112 from monitoring such data processing involved with partitioning data files into data blocks, encrypting and data blocks and obfuscating the encrypted data blocks, mutatis mutandis when the data map is decrypted and then used to de-obfuscate obfuscated encrypted data blocks, to decrypt the encrypted data blocks and to recombine the data blocks to regenerate the data files. Yet alternatively, the users terminals 110, 112 are operable to perform such data partitioning, encryption and obfuscation when off-line (for example in "flight mode") to prevent third part monitoring via malware. Optionally, the user terminals 110, 120 are operable to employ a Harvard-type processing architecture that is robust against virus and malware attack. Harvard-type architecture concerns partitioning of data and address working spaces into separate regions in computer memory. By employing such an approach, a security level approaching a one-time pad or quantum computing is capable of being achieved and substantially impossible for any eavesdropping organisation to break, even using the World's most powerful computing tools.
In a step S2.2 of the method 200, the data files corresponding to the invention disclosure are further encrypted either before uploading those or at the IPMS 122. For example, for the encrypting the data files corresponding to the invention disclosure, various encryption algorithms can be used. In embodiments of the present disclosure, the encryption algorithms are grouped based upon their security level of level LO = no security, LI = low level security, L2 = medium level security, and L3 = high level security; the example the aforementioned data partitioning, encryption and obfuscation, in combination with use of an encrypted data map, is beneficially employed to provide the L3 level security. The security levels can for example correspond to number of bits used on encrypting or complexity of the encryption method, for example as aforementioned. The levels can also correspond to one or two step verifications where one step is considered a lower level than a two step verification. A two step verification can refer on asking for a password, and sending over via a short message service (SMS) an additional security code for opening a given patent document.
In a Step S3.2 of the method 200, the patent attorney downloads the invention disclosure from the IPMS 122 to the user terminal 112, wherein the patent attorney has been given access to the invention disclosure stored in the IPMS 122.
In a Step S4.2 of the method 200, the invention disclosure is decrypted in the user terminal 112 after downloading or in the IPMS 122 before downloading, depending on the security level and settings. Preferably, in such a phase, namely distributing and working with the invention disclosure, the highest security level is used in information exchange, namely sending back and forth invention report and draft versions of a patent application draft. It will be appreciated that communication using standard e-mail using unencrypted attachments via the Internet is far from secure in view of various data mining, cookies and other types of software active on the Internet.
In a Step S5.2 of the method 200, the patent attorney uploads the patent draft to the IPMS 122 using a high security level setting for the inventor to review. In a Step S6.2 of the method 200, the inventor downloads the draft version of a patent application draft from the IMPS 112 for review and comments. The draft version of a patent draft is iterated between the inventor and the patent attorney until a patent application draft for filing is ready.
In a Step S7.2 of the method 200, the patent application for filing is filed to the patent office database (IPODB) 120 via the communication network 130. The patent application is allocated a patent application number. The text and figures of the patent application, at this stage, have security level LO since the patent office needs to have access to the files and has to be able to read those text and figures.
In a Step S8.2 of the method 200, since the text and the figures are now in addition to the IMPS 122 in the IPODB 120, a security level of the text and the figured of the patent application draft can be changed to a security level lower than used previously for example to layer L2. This is advantageous because a lower level of encryption of the documents in the IMPS 122 requires less memory in the database system and also reduces communication resources needed to decrypt the document should decryption be needed.
In the aforementioned embodiments of the present disclosure, the prosecution process is split to two different phases: (i) Phase 1 = a non-public phase; and (ii) Phase 2 = a public phase.
Typically, the non-public phase 1 is 18 months from the date of filing the patent application, or a first in a series of related patent applications that are mutually related. In the embodiments of the present disclosure, the security level L2 is maintained in the IMPS 122 during this the Phase 1.
In a Step S9.2 of the method 200, the IMPS 122 checks the IPODB 120 at preset times or regularly or randomly, in order to determine whether or not the patent application has been published.
In a Step SIO.2 of the method 200, if it is clear from data from the IPODB 120 that the patent application has been published, then there is not a need to maintain L2 level security in the documents as filed. The security level in the IPMS 122 can be changed for the respective documents to LI or LO. This will further reduce communication resource need in the IMPS 122, an amount of storage based needed and also reduces need to manage encryption keys for the files related to the published patent application.
This way, for example if the patent attorney changes or the inventor changes company, the files can be opened by anyone who has credentials to the IMPS 122.
It will be appreciated from the foregoing that execution of the method 200 in the data management system 10 with document storage capabilities provides for more efficient and secure procedure, thereby saving resources, reducing cost and potentially reducing a potential risk of any errors being made (for example inadvertent unintended public disclosure).
Modifications to embodiments of the invention described in the foregoing are possible without departing from the scope of the invention as defined by the accompanying claims. Expressions such as "including", "comprising", "incorporating", "consisting of", "have", "is" used to describe and claim the present invention are intended to be construed in a non-exclusive manner, namely allowing for items, components or elements not explicitly described also to be present. Reference to the singular is also to be construed to relate to the plural. Numerals included within parentheses in the accompanying claims are intended to assist understanding of the claims and should not be construed in any way to limit subject matter claimed by these claims.
Claims (17)
1. A data management system (10) for handling one or more documents between a plurality of user devices (110, 122), wherein the data management system (10) is operable to manage security levels (LI, L2, L3) in respect of the one or more documents, characterized in that the data management system (10) is operable: (i) to receive a first document; (ii) to set a first level of security (L3) for the first document to generate a corresponding first encrypted document; (iii) to create a second document using information derived from the first encrypted document and/or from the first document; (iv) to send the second document to at least one patent office; (v) to set a second level of security (L2) for the second document to create a corresponding second encrypted document; (vi) to retrieve publication information related to the second document from the at least one patent office; and (vii) to analyze the publication information and setting a third level (LI) of security to the second encrypted document in an event that the publication information indicates that the second document is public to create a third encrypted document.
2. A data management system (10) of claim 1, characterized in that the data management system (10) includes a server arrangement for storing document and encrypted documents, wherein the server arrangement is coupled to the plurality of user devices (110, 122) via a data communication network arrangement.
3. A data management system (10) of claim 1 or 2, characterized in that the data management system (10) is operable to use one or more encryption keys that are communicated to or generated by the user devices (110, 122) for encrypting and/or decrypting documents.
4. A data management system (10) of claim 1, 2 or 3, characterized in that the data management system (10) is operable to employ an encryption method including partitioning one or more data files into a plurality of data blocks, to encrypt the data blocks to generate corresponding encrypted data blocks and to obfuscate the encrypted data blocks by mutually swapping data therebetween to generate corresponding encrypted data, wherein a data map is also generated to define partitioning, encryption and obfuscation employed to generate the corresponding encrypted data to enable the encrypted data to be subsequently de-obfuscated, decrypted and de-partitioned to regenerate corresponding decrypted data of the one or more data files.
5. A data management system (10) of claim 4, characterized in that the data map is communicated in encrypted form within the data management system (10).
6. A data management system (10) of any one of the preceding claims, characterized in that the user devices (110, 122) are provided with detectors for detecting malware present in the users devices (110, 122) that is capable of circumventing encryption of data executed by the user devices (110, 122).
7. A data management system (10) of any one of the preceding claims, characterized in that the data management system (10) is configured for drafting revising and submitting patent application documents to one or more patent offices.
8. A data management system (10) of any one of the preceding claims, characterized in that the data management system (10) is operable to employ one or more artificial intelligence algorithms to analyze the publication information and/or to control the levels of security of the data management system (10).
9. A method of operating a data management system (10) for handling one or more documents between a plurality of user devices (110, 122), wherein the data management system (10) is operable to manage security levels (LI, L2, L3) in respect of the one or more documents, characterized in that the method inciudes: (i) receiving a first document; (ii) setting a first ievei of security (L3) for the first document to generate a corresponding first encrypted document; (iii) creating a second document using information derived from the first encrypted document and/or from the first document; (iv) sending the second document to at ieast one patent office; (v) setting a second ievei of security (L2) for the second document to create a corresponding second encrypted document; (vi) retrieving pubiication information reiated to the second document from the at ieast one patent office; and (vii) anaiyzing the pubiication information and setting a third level (LI) of security to the second encrypted document in an event that the pubiication information indicates that the second document is public to create a third encrypted document.
10. A method of ciaim 9, characterized in that the method includes arranging for the data management system (10) to include a server arrangement for storing document and encrypted documents, wherein the server arrangement is coupled to the plurality of user devices (110, 122) via a data communication network arrangement.
11. A method of claim 9 or 10, characterized in that the method includes arranging for the data management system (10) to use one or more encryption keys that are communicated to or generated by the user devices (110, 122) for encrypting and/or decrypting documents.
12. A method of claim 9, 10 or 11, characterized in that the method includes arranging for the data management system (10) to employ an encryption method including partitioning one or more data files into a plurality of data blocks, to encrypt the data blocks to generate corresponding encrypted data blocks and to obfuscate the encrypted data blocks by mutually swapping data therebetween to generate corresponding encrypted data, wherein a data map is also generated to define partitioning, encryption and obfuscation employed to generate the corresponding encrypted data to enable the encrypted data to be subsequently de-obfuscated, decrypted and de-partitioned to regenerate corresponding decrypted data of the one or more data files.
13. A method of claim 12, characterized in that the method includes communicating the data map in encrypted form within the data management system (10).
14. A method of any one of claims 9 to 13, characterized in that the method includes providing the user devices (110, 122) with detectors for detecting malware present in the users devices (110, 122) that is capable of circumventing encryption of data executed by the user devices (110, 122).
15. A method of any one of claims 9 to 14, characterized in that the method includes arranging for the data management system (10) to be configured for drafting revising and submitting patent application documents to one or more patent offices.
16. A method of any one of claims 9 to 15, characterized in that the method includes arranging for the data management system (10) to employ one or more artificial intelligence algorithms to analyze the publication information and/or to control the levels of security of the data management system (10).
17. A computer program product comprising a non-transitory computer-readable storage medium having computer-readable instructions stored thereon, the computer-readable instructions being executable by a computerized device comprising processing hardware to execute a method as claimed in any one of claims 9 to 16.
Priority Applications (6)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
GB1608642.3A GB2550557A (en) | 2016-05-17 | 2016-05-17 | Data management system and method |
EP21194840.1A EP3940612A1 (en) | 2016-05-17 | 2017-05-17 | Artificial intelligence data processing system and method |
US16/302,408 US20190199733A1 (en) | 2016-05-17 | 2017-05-17 | Artificial intelligence data processing system and method |
EP17751612.7A EP3459020A2 (en) | 2016-05-17 | 2017-05-17 | Artificial intelligence data processing system and method |
PCT/EP2017/025134 WO2017198345A2 (en) | 2016-05-17 | 2017-05-17 | Artificial intelligence data processing system and method |
US17/523,140 US20220067621A1 (en) | 2016-05-17 | 2021-11-10 | Artificial intelligence data processing system and method |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
GB1608642.3A GB2550557A (en) | 2016-05-17 | 2016-05-17 | Data management system and method |
Publications (2)
Publication Number | Publication Date |
---|---|
GB201608642D0 GB201608642D0 (en) | 2016-06-29 |
GB2550557A true GB2550557A (en) | 2017-11-29 |
Family
ID=56320523
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
GB1608642.3A Withdrawn GB2550557A (en) | 2016-05-17 | 2016-05-17 | Data management system and method |
Country Status (1)
Country | Link |
---|---|
GB (1) | GB2550557A (en) |
Cited By (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
GB2589569B (en) * | 2019-11-28 | 2022-04-13 | Augnet Ltd | Data communication system and method for providing end-to-end ciphering |
-
2016
- 2016-05-17 GB GB1608642.3A patent/GB2550557A/en not_active Withdrawn
Non-Patent Citations (1)
Title |
---|
None * |
Cited By (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
GB2589569B (en) * | 2019-11-28 | 2022-04-13 | Augnet Ltd | Data communication system and method for providing end-to-end ciphering |
Also Published As
Publication number | Publication date |
---|---|
GB201608642D0 (en) | 2016-06-29 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US11431494B2 (en) | Passwordless security system for data-at-rest | |
US9602549B2 (en) | Establishing trust between applications on a computer | |
EP2973183B1 (en) | Intra-computer protected communications between applications | |
CN104618096A (en) | Method and device for protecting secret key authorized data, and TPM (trusted platform module) secrete key management center | |
US20220200791A1 (en) | Method for encrypting and storing computer files and associated encryption and storage device | |
EP3794482B1 (en) | Method for securing an automated system | |
US10623400B2 (en) | Method and device for credential and data protection | |
Junghanns et al. | Engineering of secure multi-cloud storage | |
US20220086000A1 (en) | Cryptographic systems | |
JP2020155801A (en) | Information management system and method therefor | |
GB2550557A (en) | Data management system and method | |
Senthilkumar et al. | HB-PPAC: hierarchy-based privacy preserving access control technique in public cloud | |
US11683159B2 (en) | Hybrid content protection architecture | |
Aissaoui et al. | Data Security and Access Management in Cloud Computing: Capability list-based Cyrptography | |
Dhokate et al. | Attribute-Based Storage Supporting Secure De-duplication of Encrypted Data in Cloud using DROP Technique | |
Khandagale et al. | SECURELY-A Golang CLI Tool for Secure File Sharing with Shamir's Secret Sharing Scheme | |
Han | Confidential Documents Sharing Model Based on Blockchain Environment | |
Ashok Reddy et al. | Identity-Based Remote Data Integrity Checking Using Lattice Approach by Third-Party Auditor | |
CN117313144A (en) | Sensitive data management method and device, storage medium and electronic equipment | |
Kowalski | CRYPTOBOX V2. | |
Beley et al. | A Management of Keys of Data Sheet in Data Warehouse | |
CN116962022A (en) | Outgoing file encryption and decryption method and device, computer equipment and medium | |
KR20040008550A (en) | classified document sharing method with secret sharing system | |
Singsit et al. | Ensuring Data Privacy and Access Anonymity using Cryptographic Techniques in Cloud Computing |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
WAP | Application withdrawn, taken to be withdrawn or refused ** after publication under section 16(1) |