Abstract: A method and an apparatus for processing data provides protection for the data. The data is stored as encrypted data element values (DV) in records (P) in a first database (O-DB), each data element value being linked to a corresponding data element type (DT). In a second database (IAM-DB), a data element protection catalogue (DC) is stored, which for each individual data element type (DT) contains one or more protection attributes stating processing rules for data element values (DV), which in the first database (O-DB) are linked to the individual data element type (DT). In each user-initiated measure which aims at processing a given data element value (DV) in the first database (O-DB), a calling is initially sent to the data element protection catalogue for collecting the protection attribute/attributes associated with the corresponding data element types. The user's processing of the given data element value is controlled in conformity with the collected protection attribute/attributes.

Abstract: A method and an apparatus for processing data provides protection for the data. The data is stored as encrypted data element values (DV) in records (P) in a first database (O-DB), each data element value being linked to a corresponding data element type (DT). In a second database (IAM-DB), a data element protection catalogue (DC) is stored, which for each individual data element type (DT) contains one or more protection attributes stating processing rules for data element values (DV), which in the first database (O-DB) are linked to the individual data element type (DT). In each user-initiated measure which aims at processing a given data element value (DV) in the first database (O-DB), a calling is initially sent to the data element protection catalogue for collecting the protection attribute/attributes associated with the corresponding data element types. The user's processing of the given data element value is controlled in conformity with the collected protection attribute/attributes.

Abstract: A method and apparatus for storing data comprising an original identity(OID) and associated descriptive information(DI) are disclosed. By means of a first algorithm(ALG1), the original identity(OID) is encrypted to an update identity(UID) which, by means of a reversible algorithm(ALG2), is encrypted to a storage identity(SID) which is stored as a record(P) on a storage medium along with associated descriptive information(DI). At the times when storage identities(SID) of selected records(P) are to be replaced with new storage identities(SID'), the storage identities(SID) are decrypted in order to recreate the corresponding update identities(UID), which then are encrypted, by means of a new altered reversible algorithm(ALG2'), to new storage identities(SID') intended to replace the previous storage identities (SID).