Posture-based data protection

• US 20070277240A1
• Filed: 05/24/2006
• Published: 11/29/2007
• Est. Priority Date: 05/24/2006
• Status: Active Grant

• Current Assignee: Gula Consulting Limited Liability Company (Intellectual Ventures LLC)
• Original Assignee: Yoranso Consulting LLC (Intellectual Ventures LLC)
• Inventors: Smetters, Diana K., Balfanz, Dirk, Durfee, Glenn E., Stewart, Paul J.
• Granted Patent: US 7,793,110 B2
• Time in Patent Office: Days
• US Class Current: 726/24
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen

Abstract

One embodiment of the present invention provides a system that facilitates access to encrypted data on a computing device based on a security-posture of the computing device. During operation, the system assesses the security-posture of the computing device upon which the encrypted data is stored. If the assessed security-posture meets specified criteria, the system provides the computing device with a key which enables the computing device to access the encrypted data.

Claims

1. A method for providing access to encrypted data on a computing device based on a security-posture of the computing device, comprising:

assessing the security-posture of the computing device upon which the encrypted data is stored; and

if the assessed security-posture meets specified criteria, providing the computing device with a key which enables the computing device to access the encrypted data.

2. The method of claim 1, wherein assessing the security posture of the computing device involves determining one or more of the following:

whether unverified executable code has been loaded onto the computing device;

whether an unverified file has been loaded onto the computing device;

whether a virus scan has been recently performed on the computing device;

whether a virus scanner for the computing device has been recently updated;

whether recent patches have been applied to an operating system for the computing device;

whether the computing device is running an up-to-date firewall; and

whether the computing device is or has been connected to an insecure network.

3. The method of claim 1, wherein assessing the security-posture of the computing device involves using a posture-assessment server which interacts with the computing device to assess the security-posture of the computing device.

4. The method of claim 1, wherein providing the computing device with the key involves using a key-management server which interacts with the computing device to provide the key.

5. The method of claim 4, further comprising caching the key locally on the computing device so the computing device can access the encrypted data when the computing device is unable to communicate with the key-management server.

6. The method of claim 5, wherein after the key is cached, the method further comprises:

monitoring activity on the computing device; and

if the activity causes the security-posture of the computing device to no longer meet the specified criteria, erasing the locally cached copy of the key so that computing device cannot access the encrypted data without interacting with the key-management server again.

7. The method of claim 4, wherein the key is specific to a particular encrypted data item, so that the computing device has to interact with the key-management server again to access another encrypted data item.

8. The method of claim 4, wherein providing the key to the computing device involves obtaining the key from a trusted key storage device.

9. The method of claim 1, wherein the specified criteria is formulated as a policy which provides selective access to specific encrypted data items based on specific security-postures of the computing device.

10. A computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform a method for providing access to encrypted data on a computing device based on a security-posture of the computing device, the method comprising:

assessing the security-posture of the computing device upon which the encrypted data is stored; and

if the assessed security-posture meets specified criteria, providing the computing device with a key which enables the computing device to access the encrypted data.

11. The computer-readable storage medium of claim 10, wherein assessing the security posture of the computing device involves determining one or more of the following:

whether unverified executable code has been loaded onto the computing device;

whether an unverified file has been loaded onto the computing device;

whether a virus scan has been recently performed on the computing device;

whether a virus scanner for the computing device has been recently updated;

whether recent patches have been applied to an operating system for the computing device;

whether the computing device is running an up-to-date firewall; and

whether the computing device is or has been connected to an insecure network.

12. The computer-readable storage medium of claim 10, wherein assessing the security-posture of the computing device involves using a posture-assessment server which interacts with the computing device to assess the security-posture of the computing device.

13. The computer-readable storage medium of claim 10, wherein providing the computing device with the key involves using a key-management server which interacts with the computing device to provide the key.

14. The computer-readable storage medium of claim 13, wherein the method further comprises caching the key locally on the computing device so the computing device can access the encrypted data when the computing device is unable to communicate with the key-management server.

15. The computer-readable storage medium of claim 14, wherein after the key is cached, the method further comprises:

monitoring activity on the computing device; and

if the activity causes the security-posture of the computing device to no longer meet the specified criteria, erasing the locally cached copy of the key so that computing device cannot access the encrypted data without interacting with the key-management server again.

16. The computer-readable storage medium of claim 13, wherein the key is specific to a particular encrypted data item, so that the computing device has to interact with the key-management server again to access another encrypted data item.

17. The computer-readable storage medium of claim 13, wherein providing the key to the computing device involves obtaining the key from a trusted key storage device.

18. The computer-readable storage medium of claim 10, wherein the specified criteria is formulated as a policy which provides selective access to specific encrypted data items based on specific security-postures of the computing device.

19. An apparatus that provides access to encrypted data on a computing device based on a security-posture of the computing device, comprising:

an assessment mechanism configured to assess the security-posture of the computing device upon which the encrypted data is stored; and

an access mechanism, wherein if the assessed security-posture meets specified criteria, the access mechanism is configured to provide the computing device with a key which enables the computing device to access the encrypted data.

20. The apparatus of claim 19, wherein while assessing the security posture of the computing device, the assessment mechanism is configured to determine one or more of the following:

whether unverified executable code has been loaded onto the computing device;

whether an unverified file has been loaded onto the computing device;

whether a virus scan has been recently performed on the computing device;

whether a virus scanner for the computing device has been recently updated;

whether recent patches have been applied to an operating system for the computing device;

whether the computing device is running an up-to-date firewall; and

whether the computing device is or has been connected to an insecure network.

21. The apparatus of claim 19, wherein the assessment mechanism includes a posture-assessment server, which interacts with the computing device to assess the security-posture of the computing device.

22. The apparatus of claim 19, wherein the access mechanism includes a key-management server, which interacts with the computing device to provide the key.

23. The apparatus of claim 22, wherein the computing device is configured to cache the key locally so the computing device can access the encrypted data when the computing device is unable to communicate with the key-management server.

24. The apparatus of claim 23, further comprising:

a monitoring mechanism configured to monitor activity on the computing device;

wherein if the activity causes the security-posture of the computing device to no longer meet the specified criteria, the monitoring mechanism is configured to erase the cached copy of the key so that computing device cannot access the encrypted data without interacting with the key-management server again.

25. The apparatus of claim 22, wherein the key is specific to a particular encrypted data item, so that the computing device has to interact with the key-management server again to access another encrypted data item.

26. The apparatus of claim 22, wherein while providing the key to the computing device, the apparatus is configured to obtain the key from a trusted key storage device.

27. The apparatus of claim 19, wherein the specified criteria is formulated as a policy which provides selective access to specific encrypted data items based on specific security-postures of the computing device.