Daniel J Bailey

US Patent:

8452965, May 28, 2013

Filed:

Jun 29, 2010

Appl. No.:

12/826466

Inventors:

Robert W. Griffin - Hollis NH, US
Daniel V. Bailey - Pepperell MA, US
Joshua A. Rosenthol - Centreville VA, US

Assignee:

EMC Corporation - Hopkinton MA

International Classification:

G06F 21/00

US Classification:

713172, 713159, 726 9, 726 20

Abstract:

A technique of protecting a datum within a set of sensitive data is presented. In this technique, the datum includes a first set of bits satisfying a first set of constraints, and a computer receives the set of sensitive data from an authorized client. The technique involves producing a token corresponding to the datum, the token including a second set of bits distinct from the first set of bits, the second set of bits satisfying a second set of constraints, the second set of constraints being a superset of the first set of constraints. The technique further involves storing the datum and the corresponding token. The technique further involves sending the token to the authorized client, the authorized client enabled to perform, using the second set of bits, a verification that the token satisfies the second set of constraints, the verification being performed apart from the database.

US Patent:

8601553, Dec 3, 2013

Filed:

Jun 29, 2010

Appl. No.:

12/826481

Inventors:

Robert W. Griffin - Hollis NH, US
Daniel V. Bailey - Pepperell MA, US
Joshua A. Rosenthol - Centreville VA, US

Assignee:

EMC Corporation - Hopkinton MA

International Classification:

G06F 7/04

US Classification:

726 5, 726 2, 726 3, 713150, 713168, 713170, 709227

Abstract:

A technique of imposing access control policies is presented. The technique comprises receiving a token which is associated with a datum by a tokenization server. The technique also includes generating an access control result based on at least a portion of the token. The technique further includes imposing a first access control policy which includes refraining from sending an access request to the tokenization server when the access control result has a first value and a second access control policy which includes sending an access request to the tokenization server, the access request being constructed and arranged to request access to the datum when the access control result has a second value which is different from the first value.

US Patent:

8620882, Dec 31, 2013

Filed:

Dec 29, 2010

Appl. No.:

12/980421

Inventors:

Robert W. Griffin - Hollis NH, US
Daniel Bailey - Pepperell MA, US
Joshua Rosenthol - Centreville VA, US

Assignee:

EMC Corporation - Hopkinton MA

International Classification:

G06F 17/30

US Classification:

707694, 707784, 709203, 709219, 709229

Abstract:

An improved technique for granting access to a complex datum maps a single user token representing a user onto a set of data group tokens, each data group token providing access to a data group stored on a storage medium. The improved technique combines the centralization of the complex datum while providing the security of tokenization and will lower the risk of a rogue third party gaining unauthorized access to the user's records stored across the data groups.