Patent ID: 7472272

Claim:
A system for providing a usage accountability model for data security in a data processing system, comprising: a user client device having (i) a sensor to sense atomic level events at a point of authorized access to at least one digital asset by an end user of the user client device, the sensor located within an operating system kernel within the user client device, (ii) a filter to filter the atomic level events with an approved event list, the filter filtering out atomic level events not corresponding to approved events, and (iii) a coalescing aggregator to aggregate sets of atomic level events relating to respective single end user actions into single atomic level events, resulting in coalesced atomic level events, and to bundle and encrypt the coalesced atomic level events, resulting in bundles of coalesced atomic level events; and a journaling server having a high-level aggregator (i) to accept the bundles of coalesced atomic level events from the user client device, (ii) to decrypt the bundles of coalesced atomic level events, (iii) to store the coalesced atomic level events in a table having fields relating to the coalesced atomic level events including event type, event category, event name, event detail, and event discriminant, and (iv) to aggregate at least some of the coalesced atomic level events to generate at least one aggregate event based on at least one predetermined sequence of atomic level events, and having a reporter to generate an audit trail from the at least one aggregate event, the audit trail representing usage of the at least one digital asset by the end user.