Patent ID: 6226745
Filing Date: 2001-05-01
Classification: G06F,H04L,Y10S

Abstract:
A security system for use in a computer system having a database of information to be shared with authorized users in accordance with pre-defined constraints, comprising:a port for receiving queries requesting information from the database;means for accessing a set of rules, including query pre-processing rules and query results post-processing rules; each query pre-processing rule specifying one or more conditions that must be satisfied by any query to which the rule is applicable; each results post-processing rule specifying one or more conditions that must be satisfied by any results to which the rule is applicable;a query pre-processing module for applying to each received query all pre-processing rules applicable to the query, for blocking further processing of the query if any of the pre-processing rules applied to the received query are not passed, and for otherwise enabling execution of the received query by a database access mechanism so as to extract information from the database as specified in the query to produce a corresponding result having one or more words; anda post-processing module for applying to the result produced for each executed query all post-processing rules applicable to the result, for blocking transmission of the results if any of the post-processing rules applied to the results are not passed, and for otherwise enabling transmission of the results;wherein the post-processing rules include at least one rule that compares every word of the result with a predefined dictionary of words, and the post-processing module blocks transmission of the result if the result includes any words not in the predefined dictionary of words.