Patent ID: 7587368

Claim:
A method, comprising the steps of: storing a plurality of digital records and respective access rules for each digital record in a computer memory associated with a server system; receiving a request for access, from a remote computer, to access a digital record stored in the computer memory; validating, by the server system, the received request to access the digital record by applying a respective set of access rules for the digital record stored in the computer memory; retrieving, by the server system, a public key having an associated private key, and associating a logging wrapper having a respective session key with the digital record, after validating the received request, wherein the session key is distinct from the public key and the private key; encrypting and sending, by the server system, the requested digital record which has been validated, using the public key and the session key to encrypt the digital record; receiving and decrypting the encrypted digital record, by the remote computer, using the private key, and the session key in conjunction with the logging wrapper; generating by the logging wrapper, at the remote computer, a logging event; and recording the logging event in an access log.