Abstract:
A data storage and retrieval system suitable for use by law enforcement/criminal justice personnel and their designees. The invention creates secure connectivity over communications channels, such as the Internet, which are not considered secure under the mandate of the FBI&#39;s security policies. All of the communications are processed via a secure cloud, which processes, verifies and audits all data that passes through the system. The audited data is made available, immediately upon request by the FBI or other authorized agency.

Description:
CROSS-REFERENCES TO RELATED APPLICATIONS 
       [0001]    Pursuant to the provisions of 37 C.F.R. §1.53(c), this non-provisional application claims the benefit of an earlier-filed provisional patent application. The earlier application was assigned Ser. No. 61/648,332. It listed the same inventors. 
     
    
     STATEMENT REGARDING FEDERALLY SPONSORED RESEARCH OR DEVELOPMENT 
       [0002]    Not Applicable. 
       MICROFICHE APPENDIX 
       [0003]    Not Applicable member 
       BACKGROUND OF THE INVENTION 
       [0004]    1. Field of the Invention 
         [0005]    This invention relates to the field of data storage and retrieval systems. More specifically, the invention comprises a communication system that allows law enforcement/criminal justice entities to store and retrieve data using a remote but secure data center that is not in a law enforcement/criminal justice controlled facility. 
         [0006]    2. Description of the Related Art 
         [0007]    Law Enforcement/Criminal Justice (“LE/CJ”) agencies have for many years maintained and managed searchable databases. These databases store information regarding crimes committed, known criminals, and other data of interest to the LE/CJ community. Most of these systems operate in a closed, proprietary environment. As an example, the database maintained by the State of Florida was traditionally houses within a secure state facility. Access to that database was limited to authorized members of the Florida LE/CJ community. Several agencies of the United States Government have operated similar proprietary systems. 
         [0008]    The use of a proprietary system was at one time necessary for security reasons as the data that is transmitted over such networks is considered confidential and must be protected from unauthorized access. This approach, while effective, places physical and personnel cost burdens on the entity within the State that creates, maintains and operates the system and also limits the potential means by which authorized entities can access the critical information in question. Further, even a LE/CJ user in one state may not be able to access data available in another state&#39;s system. 
         [0009]    Some standardization has taken place in recent years. The security requirements which must be followed by any and all systems and their users that process LE/CJ data are defined by the National Crime Information Center (hereafter referred to as “NCIC”), which is a division within the United State Federal Bureau of Investigation (hereafter referred to as “FBI”). These standards must be followed in order to interact with a LE/CJ database. 
         [0010]    The description to follow uses acronyms, some of which may be unfamiliar to the reader. Accordingly, the following definitions may aid the reader&#39;s understanding: 
         [0011]    “FBI”—The Federal Bureau of Investigation. A United States governmental agency that is part of the United States Department of Justice. 
         [0012]    “NCIC”—The National Crime Information Center. This is a division within the FBI that maintains data of interest to the LE/CJ community. 
         [0013]    “Nlets”—The National Law Enforcement Telecommunication System. A non-profit entity that provides a secure communication link between the state and federal entities for purposes of transmitting and receiving LE/CJ data. 
         [0014]    “CJIS”—A general term for computer systems that access and/or maintain information of interest to the LE/CJ community. “CJIS” is generally understood to be an acronym standing for “criminal justice information system.” Thus, a “CJIS system” refers to a computer system used to access and/or maintain LE/CJ data. 
         [0015]    “LE/CJ”—Refers to a law enforcement or criminal justice person, entity, or thing. Thus, an “LE/CJ facility” refers to a physical building used by law enforcement. 
         [0016]    The prior art communication environment is hampered by the need to practice the older methods of secure communication. Specifically, most queries originate with a terminal that is physically located in an LE/CJ facility. Such queries are typically transmitted over a hard-wired connection. 
         [0017]    Of course, the current communication paradigm has shifted to wireless communications and the storage of data in a dispersed “cloud.” Security is maintained by encryption rather than physical segregation. It would be preferable to allow authorized persons to interact with CJIS data using flexible and modern communication and data storage technologies, while maintain the required level of security. The present invention provides such a solution. 
       BRIEF SUMMARY OF THE PRESENT INVENTION 
       [0018]    The present invention comprises a data storage and retrieval system suitable for use by law enforcement/criminal justice personnel and their designees. The invention creates secure connectivity over communications channels, such as the Internet, which are not considered secure under the mandate of the FBI&#39;s security policies. All of the communications are processed via a secure cloud, which processes, verifies and audits all data that passes through the system. The audited data is made available, immediately upon request by the FBI or other authorized agency. 
         [0019]    In a first embodiment of the invention, a CJIS entity and a non-CJIS entity (but who has received appropriate authorization and may or may not be related to a designated CJIS entity), by use of the invention, may access the secure cloud via an unsecure communications network (such as the Internet). Data is then forwarded via the secure cloud through a secure communications network (such as the Nlets encrypted network), thus allowing two-way communications between the CJIS or non-CJIS entity and authorized international, federal, state, local, or other LE/CJ-related data sources. 
         [0020]    In a second embodiment of the invention, a CJIS entity and a non-CJIS entity (but who has received appropriate authorization and may or may not be related to a designated CJIS entity), by use of the invention, may access the secure cloud via a secure communications network (such as the Nlets encrypted network). Data is then forwarded via the secure cloud through a secure communications network (such as the Nlets encrypted network), thus allowing two-way communications between the CJIS or non-CJIS entity and authorized international, federal, state, local, or other LE/CJ-related data sources. 
         [0021]    In a third embodiment of the invention, a CJIS entity and a non-CJIS entity (but who has received appropriate authorization and may or may not be related to a designated CJIS entity), by use of the invention, may access the secure cloud via a state network. Data is then forwarded via the secure cloud through a secure communications network (such as the Nlets encrypted network), thus allowing two-way communications between the CJIS or non-CJIS entity and authorized international, federal, state, local, or other LE/CJ-related data sources. 
         [0022]    In a fourth embodiment of the invention, a CJIS entity and a non-CJIS entity (but who has received appropriate authorization and may or may not be related to a designated CJIS entity), by use of the invention, may access the secure cloud via an unsecure communications network (such as the Internet). Data is then forwarded via the secure cloud through a secure communications network (such as the Nlets encrypted network) to a server or servers controlled by Nlets. The Nlets server facilitates all communication with authorized international, federal, state, local, or other LE/CJ-related data sources, thus allowing two-way communications between the CJIS or non-CJIS entity and the desired data sources. 
         [0023]    In a fifth embodiment of the invention, a CJIS entity and a non-CJIS entity (but who has received appropriate authorization and may or may not be related to a designated CJIS entity), by use of the invention, may access the secure cloud via a secure communications network (such as the Nlets encrypted network). Data is then forwarded via the secure cloud through a secure communications network (such as the Nlets encrypted network) to a server or servers controlled by Nlets. The Nlets server facilitates all communication with authorized international, federal, state, local, or other LE/CJ-related data sources, thus allowing two-way communications between the CJIS or non-CJIS entity and the desired data sources. 
         [0024]    In a sixth embodiment of the invention, a CJIS entity and a non-CJIS entity (but who has received appropriate authorization and may or may not be related to a designated CJIS entity), by use of the invention, may access the secure cloud via a state network. Data is then forwarded via the secure cloud through a secure communications network (such as the Nlets encrypted network) to a server or servers controlled by Nlets. The Nlets server facilitates all communication with authorized international, federal, state, local, or other LE/CJ-related data sources, thus allowing two-way communications between the CJIS or non-CJIS entity and the desired data sources. 
     
    
     
       BRIEF DESCRIPTION OF THE SEVERAL VIEWS OF THE DRAWINGS 
         [0025]      FIG. 1  is a block diagram, showing an embodiment in which both CJIS and non-CJIS entities access the secure cloud via the invention over an unsecure communications network and communication between the secure cloud and other international, federal, state, local, and other data sources is facilitated via a secure communications network and/or state network. 
           [0026]      FIG. 2   a  is a block diagram, showing an embodiment in which both CJIS and non-CJIS entities access the secure cloud via the invention over a secure communications network and communication between the secure cloud and other international, federal, state, local, and other data sources is facilitated via a secure communications network and/or state network. 
           [0027]      FIG. 2   b  is a block diagram, showing an embodiment in which both CJIS and non-CJIS entities access the secure cloud via use of the invention over a state network and communication between the secure cloud and other international, federal, state, local, and other data sources is facilitated via a secure communications network and/or state network. 
           [0028]      FIG. 3  is a block diagram, showing an embodiment in which both CJIS and non-CJIS entities access the secure cloud via use of the invention over an unsecure communications network and communication between the secure cloud and other international, federal, state, local, and other data sources is facilitated via the Nlets server. 
           [0029]      FIG. 4   a  is a block diagram, showing an embodiment in which both CJIS and non-CJIS entities access the secure cloud via use of the invention over a secure communications network and communication between the secure cloud and other international, federal, state, local, and other data sources is facilitated via the Nlets server. 
           [0030]      FIG. 4   b  is a block diagram, showing an embodiment in which both CJIS and non-CJIS entities access the secure cloud via use of the invention over a state network and communication between the secure cloud and other international, federal, state, local, and other data sources is facilitated via the Nlets server. 
           [0031]      FIG. 5  is a block diagram, showing the flow of a transaction from a CJIS or non-CJIS entity to a data provider. 
           [0032]      FIG. 6  is a block diagram, showing the flow of a transaction from a data provider to a secure cloud server or CJIS or non-CJIS entity. 
           [0033]      FIG. 7  is a block diagram, showing the flow of a transaction from a secure cloud server to data providers or CJIS or non-CJIS entities. 
       
    
    
     DETAILED DESCRIPTION OF THE INVENTION 
       [0034]    The secure cloud used in the specific embodiments described hereafter is run by DATAMAXX, Inc. The secure cloud is therefore referred to as the “DATAMAXX secure cloud.” or “DSC.” In  FIG. 1 , Item  101  represents the DSC. The DSC is located in a non-LE/CJ controlled facility. It is however a secure facility able to send, receive, process, analyze, store, and log LE/CJ transactions in accordance with the standards applicable to NCIC-approved facilities. The overall security of the DSC is preferably maintained using the following:
       1. Regularly reviewing the CJIS Security Policy (issued by the FBI) to ensure that persons working with the DSC are aware of the latest security standards and comply with those standards;   2. Performing background checks for all personnel working with the DSC;   3. Performing fingerprint checks on all personnel working with the DSC;   4. Securing the physical premises where equipment related to the DSC is located, including:
           a. video surveillance,   b. keypass access control.   c. biometric-based access to more sensitive areas,   d. inclusion of a fire suppression system,   e. a backup power source,   f. a visitor management system;   
           5. Securing the network used by the DSC with a variety of technologies including:
           a. firewalls,   b. anti-virus software,   c. intrusion detection systems,   d. ethical hacking tests,   e. network security scans,   f. encrypting all communications of CJIS data outside the DSC to current NCIC encryption standards or better; and   
           6. Providing security awareness training for all personnel working with the DSC.       
 
         [0053]    All aspects of the DSC and its operations and interactions with other entities will be made available for audit by authorized LE/CJ agencies that are the sources of the LE/CJ information being handled by the DSC. 
         [0054]    Item  102  represents the server(s) located within the DSC  101  that send, receive, process, analyze, store and log transactions and LE/CJ data sent and/or received from: CJIS entities  106 , non-CJIS entities  105 , Federal Agencies  110 , State Agencies  113 . Local Agencies  115 , International Agencies  108 , and other data providers  117 . The sending, receiving, processing, analyzing, storing, and logging of transactions and LE/CJ data may be performed by computer applications or solutions provided by DATAMAXX or other providers. 
         [0055]    Item  103  represents the databases used by the server(s)  102  for purposes of processing, analyzing, storing and logging transactions in addition to LE/CJ data. These databases may store LE/CJ-related data on behalf of an agency which owns the data and as such may represent data that CJIS entities  106  and non-CJIS entities  105  may wish access to. 
         [0056]    Item  104  represents any unsecure communications network which a CJIS  106  or non-CJIS  105  entity will utilize to establish communications with the DSC  101 . Examples of such unsecure communications networks comprise: 
         [0057]    1. The Internet; 
         [0058]    2. Dedicated wide area network circuits, such as T1, DS3, or MPLS circuits, provided by such third-party vendors as SPRINT or LEVEL3 COMMUNICATIONS; 
         [0059]    3. Wireless networks, such as Wi-Fi or cellular. 
         [0060]    The invention creates secure, encrypted communication paths between the CJIS  106  and non-CJIS  105  entities and the DSC  101  through unsecure communications networks such that all communications between the CJIS  106  and non-CJIS  105  entities and the DSC  101  over such unsecure communications networks which involves LE/CJ data or other sensitive information such as user or device identification and credentials is encrypted according to current CJIS Security Policy encryption standards. These standards change based on feedback from and the requirements of the LE/CJ community as well as based on advances in technology. The DSC employees regularly review these standards to ensure the DSC is meeting or exceeding them. 
         [0061]    Item  105  represents a non-CJIS entity that has been authorized to send and/or receive LE/CJ transactions or transactions needed for LE/CJ purposes. This entity accesses the DSC  101  via an unsecure communications network  104 . The transactions that are sent and/or received might include: 
         [0062]    1. User-initiated transactions, where an authorized user initiates a specific transactions to one or more secure data sources accessed via DSC  101 : 
         [0063]    2. User-destined transactions, where an authorized automated system initiates a transaction to one or more secure data sources accessed via DSC  101 , based on other data the automated system has processed; and 
         [0064]    3. System-destined transactions, where an authorized automated system receives a specific transaction send from one or more secure data sources accessed via DSC  101  which it will process and handle according to its own requirements. 
         [0065]    Item  106  represents a CJIS entity that has been authorized to send and/or receive LE/CJ transactions or transactions needed for LE/CJ purposes. This entity accesses the DSC  101  via an unsecure communications network  104 . The transactions that are sent and/or received might include: 
         [0066]    1. User initiated transactions, where an authorized user initiates a specific transactions to one or more secure data sources accessed via DSC  101 ; 
         [0067]    2. User-destined transactions, where an authorized user receives a specific transaction sent from one or more secure data sources accessed via DSC  101 ; 
         [0068]    3. System-initiated transactions, where an authorized automated system initiates a transaction to one or more secure data sources accessed via DSC  101 , based on other data the automated system has processed; and 
         [0069]    4. System-destined transactions, where an authorized automated system receives a specific transaction send from one or more secure data sources accessed via DSC  101  which it will process and handle according to its own requirements. 
         [0070]    Item  107  represents a secure communications network used to facilitate secure communications between the DSC  101  and International Agencies  108 , Federal Agencies  110 , and State Networks  112 . All communications over such secure networks are encrypted to meet CJIS Security Policy standards for networks transmitting CJIS-related data. Examples of such a network comprise: 
         [0071]    1. The Nlets-encrypted communications network. End-to-end encryption on this network is provided by Nlets and meets current CJIS Security Policy standards; 
         [0072]    2. Dedicated wide area network circuits, such as T1, DS3, or MPLS circuits, which have been secured at both ends of the connection by using encryption functions. The encryption functions are controlled by the LE/CJ agency being reached at one end and DSC  101  at the other end, such that any data traversing the circuit controlled by the third-party vendor is encrypted to meet current CJIS Security Policy standards; and 
         [0073]    3. The Internet, where each end of the connection between DSC  101  and the LEiCJ agency being reached is secured using encryption functions meeting the current CJIS Security Policy standards. 
         [0074]    Item  108  represents an International Agency with secure data, examples of which might be the International Criminal Police Organization (INTERPOL) or the Royal Canadian Mounted Police, with which CJIS  106  and non-CJIS  105  entities desire to communicate. 
         [0075]    Item  109  represents the databases with secure data controlled by an International Agency  108 . Item  110  represents a Federal Agency with secure data, an example of which might be the NCIC, with which CJIS  106  and non-CJIS  105  entities desire to communicate. Item  111  represents the databases with secure data controlled by a Federal Agency  110 . Item  112  represents a State&#39;s communications network, through which communications with State Agencies  113  and Local Agencies  115  may be facilitated. Methods for accessing the secure data located at State Agencies  113  and Local Agencies  115  comprise: 
         [0076]    1. Utilizing a message processing system located within the State&#39;s communications network which then connects to all necessary State Agencies  113  and Local Agencies  115 , allowing a single transaction sent to the message processing system to then retrieve all relevant information from State Agencies  113  and Local Agencies  115 ; and 
         [0077]    2. Utilizing the State&#39;s communications network  112  as an extension of the Secure Communications Network  107  to connect directly to the State Agencies  113  and Local Agencies  115 . 
         [0078]    Item  113  represents a State Agency with secure data, examples of which might be the Department of Motor Vehicles or Department of Public Safety, with which CJIS  106  and non-CJIS  105  entities desire to communicate. Item  114  represents the databases with secure data controlled by a State Agency  113 . 
         [0079]    Item  115  represents a Local Agency within a State with secure data, an example of which might be a local police department&#39;s arrest records, with which CJIS  106  and non-CJIS  105  entities desire to communicate. Item  116  represents the databases with secure data controlled by a Local Agency  115 . 
         [0080]    Item  117  represents other providers of data that is of interest to CJIS  106  and non-CJIS  105  entities for LE/CJ purposes, examples of which might be providers of hazardous materials information or wants and warrants information from a local law enforcement agency. Item  118  represents the databases with data relevant to LE/CJ purposes and which are controlled by other data providers  117 . 
         [0081]    Turning now to  FIGS. 2   a  and  2   b , the differences between these embodiments and the embodiment depicted in  FIG. 1  will be explained. In the embodiment of  FIG. 2   a , the communication with the DSC  201  passes exclusively through secure communication network  207 . The other components are the same as shown in  FIG. 1 . The reader should note that the reference numerals used in the figures change according to the figure number. As an example, the DSC is labeled as “ 101 ” in  FIG. 1 , “ 201 ” in  FIGS. 2   a  and  2   b , “ 301 ” in  FIG. 3 , etc. 
         [0082]    In the embodiment of  FIG. 2   b , the communications with non-CJIS entity  205   b . CJIS entity  206   b , and state agency  213  all take place via state network  212 . State network  212  exchanges data with secure communication network  207 , which exchanges data with DSC  201 . 
         [0083]    In the embodiment of  FIG. 3 , CJIS entity  306  and non-CJIS entity  305  communicate with unsecure communications network  304 . Unsecure communications network  304  then communicates with DSC  301 . Nlets server  319  communicates with secure communications network  307 , which in turn communicates with DSC  301 . 
         [0084]    In the embodiment of  FIG. 4   a , both non-CJIS entity  405   a  and CJIS entity  406   a  communicate through secure communications network  407 . The secure communications network  407  then communicates with DSC  401 . 
         [0085]    In the embodiment of  FIG. 4   b , a non-CJIS entity  405   b , CJIS entity  406   b , and state agency  413  all communicate through state network  412 . The state network then communicates through secure communications network  407 , which is tied to DSC  401 . 
         [0086]    Item  501   a  in  FIG. 5  depicts a CJIS entity ( 106 / 206   a / 206   b / 306 / 406   a / 406   b ) establishing a secure communications connection to the DSC ( 101 / 201 / 301 / 401 ). Examples of this might include: 
         [0087]    1. CJIS entity ( 106 / 206   a / 206   b / 306 / 406   a / 406   b ) establishing an HTTPS session with the DSC server, where the DSC server only negotiates encryption options with the CJIS entity, where the encryption options comply with current CJIS Security Policy; 
         [0088]    2. CJIS entity ( 106 / 206   a / 206   b / 306 / 406   a / 406   b ) using an application provided by a vendor which establishes a secure encrypted path between the CJIS entity and the DSC or DSC server, where the security provided by the application meets or exceeds current CJIS policy guidelines; 
         [0089]    3. CJIS entity ( 206   a ) establishing a connection to a secure communications network  207  and through that connecting to the DSC server  202 ; and 
         [0090]    4. CJIS entity ( 206   b ) establishing a connection to a State Network ( 212 ) and through that connecting to the DSC server ( 202 ). 
         [0091]    Item  501   b  in  FIG. 5  represents a non-CJIS entity ( 105 / 205   a / 205   b / 305 / 405   a / 405   b ) establishing a secure communications connected to DSC ( 101 / 201 / 301 / 401 ). Examples of this include: 
         [0092]    1. Non-CJIS entity ( 105 / 205   a / 205   b / 305 / 405   a / 405   b ) establishing an HTTPS session with the DSC server, where the DSC server only negotiates encryption options with the non-CJIS entity, where the encryption options comply with current CJIS Security Policy; 
         [0093]    2. Non-CJIS entity ( 105 / 205   a / 205   b / 305 / 405   a / 405   b ) using an application provided by a vendor which establishes a secure encrypted path between the non-CJIS entity and the DSC or DSC server, where the security provided by the application meets or exceeds current CJIS policy guidelines; 
         [0094]    3. Non-CJIS entity ( 205   a ) establishing a connection to a secure communications network  207  and through that connecting to the DSC server  202 : and 
         [0095]    4. Non-CJIS entity ( 205   b ) establishing a connection to a State Network ( 212 ) and through that connecting to the DSC server ( 202 ). 
         [0096]    Item  502   a  in  FIG. 5  represents a CJIS entity ( 106 / 206   a / 206   b / 306 / 406   a / 406   b ) sending a transaction to the DSC Server ( 102 / 202 / 302 / 402 ). Item  502   b  in  FIG. 5  represents a CJIS entity ( 105 / 205   a / 205   b / 305 / 405   a / 405   b ) sending a transaction to the DSC Server ( 102 / 202 / 302 / 402 ). 
         [0097]    Item  503  in  FIG. 5  represents the DSC Server ( 102 / 202 / 302 / 402 ) processing the transaction it has received and taking one or more actions based on that transaction. The actions taken might comprise one or more of the following: 
         [0098]    1. Item  504   a  represents the situation where the DSC Server ( 102 / 202 / 302 / 402 ) that received the transaction or another DSC Server ( 102 / 202 / 302 / 402 ) within the DSC ( 101 / 201 / 301 / 401 ) is needed to take an action beyond forwarding the transaction to another data provider. An example of this situation might be the DSC Server ( 102 / 202 / 302 / 402 ) inserting data into or retrieving data from a Database ( 103 / 203 / 303 / 403 ); 
         [0099]    2. Item  504   b  represents the situation where the DSC Server ( 102 / 202 / 302 / 402 ), upon analyzing and processing the received transaction, determines that it must send a transaction to an International Agency ( 108 / 208 / 308 / 408 ); 
         [0100]    3. Item  504   c  represents the situation where the DSC Server ( 102 / 202 / 302 / 402 ), upon analyzing and processing the received transaction, determines that it must send a transaction to a Federal Agency ( 110 / 210 / 310 / 410 ); 
         [0101]    4. Item  504   d  represents the situation where the DSC Server ( 102 / 202 / 302 / 402 ), upon analyzing and processing the received transaction, determines that it must send a transaction to a State Agency ( 113 / 213 / 313 / 413 ); 
         [0102]    5. Item  504   e  represents the situation where the DSC Server ( 102 / 202 / 302 / 402 ), upon analyzing and processing the received transaction, determines that it must send a transaction to a Local Agency ( 115 / 215 / 315 / 415 ); 
         [0103]    6. Item  504   f  represents the situation where the DSC Server ( 102 / 202 / 302 / 402 ), upon analyzing and processing the received transaction, determines that it must send a transaction to an Other Data Provider ( 117 / 217 / 317 / 417 ). 
         [0104]    Item  601   a  in  FIG. 6  represents the situation where an International Agency ( 108 / 208 / 308 / 408 ) sends a transaction to a DSC Server ( 102 / 202 / 302 / 402 ) where the intended recipient of the transaction might be one or more of: a DSC Server ( 102 / 202 / 302 / 402 ), CJIS entity ( 106 / 206   a / 206   b / 306 / 406   a / 406   b ) or non-CJIS entity ( 105 / 205   a / 205   b / 305 / 405   a / 405   b ). This may have been initiated by the sender in response to a previously received transaction received from one or more of the recipients or triggered by some other mechanism not directly related to the intended recipient(s) of this new message. 
         [0105]    Item  601   b  represents the situation where a Federal Agency ( 110 / 210 / 310 / 410 ) sends a transaction to a DSC Server ( 102 / 202 / 302 / 402 ) where the intended recipient of the transaction might be one or more of: a DSC Server ( 102 / 202 / 302 / 402 ), CJIS entity ( 106 / 206   a / 206   b / 306 / 406   a / 406   b ) or non-CJIS entity ( 105 / 205   a / 205   b / 305 / 405   a / 405   b ). This may have been initiated by the sender in response to a previously received transaction received from one or more of the recipients or triggered by some other mechanism not directly related to the intended recipient(s) of this new message. 
         [0106]    Item  601   c  represents the situation where a State Agency ( 113 / 213 / 313 / 413 ) sends a transaction to a DSC Server ( 102 / 202 / 302 / 402 ) where the intended recipient of the transaction might be one or more of: a DSC Server ( 102 / 202 / 302 / 402 ), CJIS entity ( 106 / 206   a / 206   b / 306 / 406   a / 406   b ) or non-CJIS entity ( 105 / 205   a / 205   b / 305 / 405   a / 405   b ). This may have been initiated by the sender in response to a previously received transaction received from one or more of the recipients or triggered by some other mechanism not directly related to the intended recipient(s) of this new message. 
         [0107]    Item  601   d  represents the situation where a Local Agency ( 115 / 215 / 315 / 415 ) sends a transaction to a DSC Server ( 102 / 202 / 302 / 402 ) where the intended recipient of the transaction might be one or more of: a DSC Server ( 102 / 202 / 302 / 402 ), CJIS entity ( 106 / 206   a / 206   b / 306 / 406   a / 406   b ) or non-CJIS entity ( 105 / 205   a / 205   b / 305 / 405   a / 405   b ). This may have been initiated by the sender in response to a previously received transaction received from one or more of the recipients or triggered by some other mechanism not directly related to the intended recipient(s) of this new message. 
         [0108]    Item  601   e  represents the situation where an Other Data Provider ( 117 / 217 / 317 / 417 ) sends a transaction to a DSC Server ( 102 / 202 / 302 / 402 ) where the intended recipient of the transaction might be one or more of: a DSC Server ( 102 / 202 / 302 / 402 ), CJIS entity ( 106 / 206   a / 206   b / 306 / 406   a / 406   b ) or non-CJIS entity ( 105 / 205   a / 205   b / 305 / 405   a / 405   b ). This may have been initiated by the sender in response to a previously received transaction received from one or more of the recipients or triggered by some other mechanism not directly related to the intended recipient(s) of this new message. 
         [0109]    Item  602  represents the DSC Server ( 102 / 202 / 302 / 402 ) processing the transaction it has received and taking one or more actions based on that transaction. The actions taken might comprise one or more of the following: 
         [0110]    1. Item  603   a  represents the situation where the DSC Server ( 102 / 202 / 302 / 402 ) that received the transaction or another DSC Server ( 102 / 202 / 302 / 402 ) within the DSC ( 101 / 201 / 301 / 401 ) is needed to take an action beyond forwarding the transaction to another recipient. An example of this situation might be the DSC Server ( 102 / 202 / 302 / 402 ) inserting data into or retrieving data from a Database ( 103 / 203 / 303 / 403 ); 
         [0111]    2. Item  603   b  represents the situation where the DSC Server ( 102 / 202 / 302 / 402 ), upon analyzing and processing the received transaction, determines that it must send a transaction to a CJIS Entity ( 106 / 206   a / 206   b / 306 / 406   a / 406   b ); and 
         [0112]    3. Item  603   c  represents the situation where the DSC Server ( 102 / 202 / 302 / 402 ), upon analyzing and processing the received transaction, determines that it must send a transaction to a non-CJIS Entity ( 105 / 205   a / 205   b / 305 / 405   a / 405   b ). 
         [0113]    Item  701  in  FIG. 7  represents the situation where a DSC Server ( 102 / 202 / 302 / 402 ) sends a transaction to one or more recipients. This may have been initiated by the sender in response to a previously received transaction received from one or more of the recipients or triggered by some other mechanism not directly related to the intended recipient(s) of this new message. The intended recipient might comprise one or more of: 
         [0114]    1. Item  702   a  represents the situation where the transaction is sent to an international Agency ( 108 / 208 / 308 / 408 ). It may be necessary for the sending DSC Server to send the transaction via another DSC Server which has a communications connection to the intended recipient; 
         [0115]    2. Item  702   b  represents the situation where the transaction is sent to a Federal Agency ( 110 / 210 / 310 / 410 ). It may be necessary for the sending DSC Server to send the transaction via another DSC Server which has a communications connection to the intended recipient; 
         [0116]    3. Item  702   c  represents the situation where the transaction is sent to a State Agency ( 113 / 213 / 313 / 413 ). It may be necessary for the sending DSC Server to send the transaction via another DSC Server which has a communications connection to the intended recipient; 
         [0117]    4. Item  702   d  represents the situation where the transaction is sent to a Local Agency ( 115 / 215 / 315 / 415 ). It may be necessary for the sending DSC Server to send the transaction via another DSC Server which has a communications connection to the intended recipient; 
         [0118]    5. Item  702   e  represents the situation where the transaction is sent to an Other Data Provider ( 117 / 217 / 317 / 417 ). It may be necessary for the sending DSC Server to send the transaction via another DSC Server which has a communications connection to the intended recipient; 
         [0119]    6. Item  702   f  represents the situation where the transaction is sent to a CJIS Entity ( 106 / 206   a / 206   b / 306 / 406   a / 406   b ). It may be necessary for the sending DSC Server to send the transaction via another DSC Server which has a communications connection to the intended recipient; and 
         [0120]    7. Item  702   g  represents the situation where the transaction is sent to a non-CJIS Entity ( 105 / 205   a / 205   b / 305 / 405   a / 405   b ). It may be necessary for the sending DSC Server to send the transaction via another DSC Server which has a communications connection to the intended recipient. 
         [0121]    The invention allows the non-LE/CJ controlled but secure facility to access International data sources, comprising of Canadian Police Information Center files, individual Canadian province motor vehicle files, the International Criminal Police Organization, amongst others. 
         [0122]    The invention allows the non-LE/CJ controlled but secure facility to access Federal data sources, comprising National Crime Information Center, persons and property files, national gun check system, criminal history index, amongst others. 
         [0123]    The invention allows the non-LE/CJ controlled but secure facility to access individual State data sources, comprising Department of Motor Vehicles, sex offender, criminal history, gun permits, corrections information, warrant information, amongst others. 
         [0124]    The invention allows the non-LE/CJ controlled but secure facility to access Local municipal data sources, comprising local records such as violations, warrant information, amongst others. 
         [0125]    The invention allows the non-LE/CJ controlled but secure facility to access other data sources of interest to LE/CJ entities for law-enforcement purposes, comprising of Hazardous Materials, Aircraft Registration, amongst others. 
         [0126]    The invention allows the non-LE/CJ controlled but secure facility to access, via Nlets server(s), International data sources, comprising of Canadian Police Information Center files, individual Canadian province motor vehicle files, the International Criminal Police Organization, amongst others. 
         [0127]    The invention allows the non-LE/CJ controlled but secure facility to access, via Nlets server(s), Federal data sources, comprising National Crime Information Center, persons and property files, national gun check system, criminal history index, amongst others. 
         [0128]    The invention allows the non-LE/CJ controlled but secure facility to access, via Nlets server(s), individual State data sources, comprising Department of Motor Vehicles, sex offender, criminal history, gun permits, corrections information, warrant information, amongst others. 
         [0129]    The invention allows the non-LE/CJ controlled but secure facility to access, via Nlets server(s), Local municipal data sources, comprising local records such as violations, warrant information, amongst others. 
         [0130]    The invention allows the non-LECJ controlled but secure facility to access, via Nlets server(s), other data sources of interest to LE/CJ entities fir law-enforcement purposes, comprising of Hazardous Materials, Aircraft Registration, amongst others 
         [0131]    The invention allows Criminal Justice and Law Enforcement to access via direct end user interface the secure facility via secure communications for purposes of accessing and maintaining data from Federal, State, Local, and International data sources which the secure facility allows access to. 
         [0132]    The invention allows Criminal Justice and Law Enforcement to access via programmatic interface the secure facility via secure communications for purposes of accessing and maintaining data from Federal, State, Local, and International data sources which the secure facility allows access to. 
         [0133]    The invention allows non-Criminal Justice and Law Enforcement to access via direct end user interface the secure facility via secure communications for purposes of accessing and maintaining data from Federal, State, Local, and International data sources which the secure facility allows access to. 
         [0134]    The invention allows non-Criminal Justice and Law Enforcement to access via programmatic interface the secure facility via secure communications for purposes of accessing and maintaining data from Federal, State, Local, and International data sources which the secure facility allows access to. 
         [0135]    Although the preceding description contains significant detail, it should not be construed as limiting the scope of the invention but rather as providing illustrations of the preferred embodiments of the invention. Thus, the scope of the present invention should be fixed by the claims rather than the specific examples given.