Patent ID: 9311504
Filing Date: 2016-04-12
CPC Classification: G06F,H04L

Claim Text:
1. An apparatus for securing a database accessed through an Internet-facing server computer, comprising: (a) a controller device having at least one processor, at least one memory associated with said processor, and programming retained in said memory and configured for execution on said processor, said controller device being plugged into said Internet-facing server computer, (b) a database retained in said at least one memory, said database containing a plurality of separate records, wherein each record is identified by a unique key and wherein each key is associated with one or more non-unique values; (c) one unprivileged communication channel/port on said controller device, said unprivileged communication channel/port configured for connection to said Internet-facing server computer, said Internet-facing server computer connected to the Internet such that requests for data from said database are received, from across the Internet via said unprivileged communication channel/port, by said controller device; and (d) one separate privileged communication channel/port on said controller device, said privileged communication channel/port providing local control of the database, said privileged communication channel/port configured for connection to said Internet-facing server computer, said Internet-facing server computer connected to the Internet in such a way that said privileged communication channel/port is not connected to the Internet and is not reachable from across the Internet via said Internet-facing server computer; (e) wherein said programming executable on said processor is configured for performing steps comprising: