SYSTEMS AND METHODS FOR SECURE WATCHLISTING

• US 20110142237A1
• Filed: 02/21/2008
• Published: 06/16/2011
• Est. Priority Date: 02/21/2008
• Status: Active Grant

• Current Assignee: CGI Federal Incorporated (CGI, Inc.)
• Original Assignee: CGI Federal Incorporated (CGI, Inc.)
• Inventors: Iasso, Anthony S.
• Granted Patent: US 8,555,354 B2
• Time in Patent Office: Days
• US Class Current: 380/259
• CPC Class Codes: G06F 21/552 involving long-term monitoring or reporting
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 2463/062 applying encryption of the keys cryptographic mechanisms or cryptographic arrangements for key distribution using key encryption key H04L9/0822
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection

Abstract

A watchlisting module is configured to securely and efficiently create, modify, manage, and store a watchlist. The watchlisting module is configured to generate a watchlist consisting of watchlist entries. Each watchlist entry encapsulates information about an entity to be associated with the watchlist. The watchlist entry includes information about the entity including a unique identifier for the watchlist, a unique identifier of the watchlist entry, a unique identifier for the entity, and access control information for membership process related to the watchlist. The watchlist entry also includes a State Lock. Watchlisting module is configured to utilize the State Lock to secure and verify a watchlist entry.

Claims

1. A method for tracking entities, comprising:

receiving a request to create a watchlist including an entity associated with the watchlist;

providing an interface for entering information about the watchlist, the information comprising access control information for controlling access to processes associated with the watchlist;

generating a first unique identifier for identifying the watchlist;

generating a second unique identifier for identifying a watchlist entry;

generating the watchlist including the watchlist entry, the watchlist entry comprising an identity of the entity, the first unique identifier, the second unique identifier, a third unique identifier for identifying the entity, and the access control information; and

storing the generated watchlist.

2. The method of claim 1, wherein the request comprises the identity of the entity, the third unique identifier, and a threat posed by the entity.

3. The method of claim 1, wherein the processes associated with the watchlist comprise nominating membership of entities to the watchlist, approving membership of entities to the watchlist, denying membership of entities to the watchlist, and removing membership of entities to the watchlist.

4. The method of claim 3, wherein the access information comprises at least one password for at least one process.

5. The method of claim 1, wherein the watchlist further comprise information about the creator of the watchlist.

6. The method of claim 1, further comprising:

generating a state key for the watchlist entry, the state key comprising the first unique identifier, the second unique identifier, the third unique identifier, and the access control information; and

encrypting the state key to generate a state lock.

7. The method of claim 6, wherein encrypting the state key comprises:

performing a symmetric encryption process on the state key to generate the state lock.

8. A method for tracking entities, comprising:

maintaining at least one watchlist in a repository, the at least one watchlist comprising a plurality of watchlist entities, wherein each watchlist entry of the plurality of watchlist entries comprises an identity of an entity associated with the watchlist, a first unique identifier for identifying the at least one watchlist, a second unique identifier for identifying the watchlist entry, a third unique identifier for identifying the entity, and access control information for controlling access to processes associated with each of the plurality of watchlist entries;

providing interfaces for interacting with the at least one watchlist, wherein the interfaces allow a user to interact with the at least one watchlist;

retrieving information from the at least one watchlist in the repository in response to user interaction with the interfaces; and

providing the retrieved information to the user.

9. The method of claim 8, wherein maintaining the at least one watchlist, comprises:

generating a state key for at least one watchlist entry, the state key comprising a first unique identifier for identifying the at least one watchlist, a second unique identifier for identifying the at least one watchlist entry, a third unique identifier for identifying a stored entity associated with the at least one watchlist entry, and access control information for controlling access to processes associated with the at least one watchlist entry; and

encrypting the state key to generate a state lock.

10. The method of claim 9, wherein encrypting the state key comprises:

performing a symmetric encryption process on the state key to generate the state lock.

11. The method of claim 9, wherein maintaining the watchlist further comprises:

decrypting the state lock to retrieve the state key; and

comparing the state key to the at least one watchlist entry.

12. The method of claim 8, wherein the processes associated with the at least one watchlist comprise nominating membership of entities to the at least one watchlist, approving membership of entities to the at least one watchlist, denying membership of entities to the at least one watchlist, and removing membership of entities from the at least one watchlist.

13. The method of claim 12, wherein the access information comprises at least one password for at least one process.

14. An system for tracking entities, comprising:

a repository, the at least one watchlist comprising a plurality of watchlist entities, wherein each watchlist entry of the plurality of watchlist entries comprises an identity of an entity associated with the watchlist, a first unique identifier for identifying the at least one watchlist, a second unique identifier for identifying the watchlist entry, a third unique identifier for identifying the entity, and access control information for controlling access to processes associated with each of the plurality of watchlist entries; and

a watchlisting module coupled to the repository and configured to maintain the at least one watchlist, the watchlisting module comprising;

a watchlisting engine configured to retrieve information from the at least one watchlist in the repository; and

an application interface configured to provide interfaces for interacting with the at least one watchlist, wherein the interfaces allow a user to interact with the at least one watchlist.

15. The system of claim 14, wherein the watchlisting engine is further configured to:

generate a state key for at least one watchlist entry, the state key comprising a first unique identifier for identifying the at least one watchlist, a second unique identifier for identifying the at least one watchlist entry, a third unique identifier for identifying a stored entity associated with the at least one watchlist entry, and access control information for controlling access to processes associated with the at least one watchlist entry; and

encrypt the state key to generate a state lock.

16. The system of claim 15, wherein the watchlisting engine is further configured to:

perform a symmetric encryption process on the state key to generate the state lock.

17. The system of claim 15, wherein the watchlisting engine is further configured to:

decrypt the state lock to retrieve the state key; and

compare the state key to the at least one watchlist entry.

18. The system of claim 14, wherein the watchlisting engine is configured to manage processes associated with the at least one watchlist, the processes comprising nominating membership of entities to the at least one watchlist, approving membership of entities to the at least one watchlist, denying membership of entities to the at least one watchlist, and removing membership of entities from the at least one watchlist.

19. The system of claim 18, wherein the watchlisting engine is configured to allow access to processes based on at least one password for at least one process.

20. A computer readable medium comprising instructions for causing a computer to perform a method for tracking'"'"'entities, the method comprising:

maintaining at least one watchlist in a repository, the at least one watchlist comprising a plurality of watchlist entities, wherein each watchlist entry of the plurality of watchlist entries comprises an identity of an entity associated with the watchlist, a first unique identifier for identifying the at least one watchlist, a second unique identifier for identifying the watchlist entry, a third unique identifier for identifying the entity, and access control information for controlling access to processes associated with each of the plurality of watchlist entries;

providing interfaces for interacting with the at least one watchlist, wherein the interfaces allow a user to interact with the at least one watchlist;

retrieving information from the at least one watchlist in the repository in response to user interaction with the interfaces; and

providing the retrieved information to the user.

21. The computer readable medium of claim 20, wherein maintaining the at least one watchlist, comprises:

generating a state key for at least one watchlist entry, the state key comprising a first unique identifier for identifying the at least one watchlist, a second unique identifier for identifying the at least one watchlist entry, a third unique identifier for identifying a stored entity associated with the at least one watchlist entry, and access control information for controlling access to processes associated with the at least one watchlist entry; and

encrypting the state key to generate a state lock.

22. The computer readable medium of claim 21, wherein encrypting the state key comprises:

performing a symmetric encryption process on the state key to generate the state lock.

23. The computer readable medium of claim 21, wherein maintaining the watchlist further comprises:

decrypting the state lock to retrieve the state key; and

comparing the state key to the at least one watchlist entry.

24. The computer readable medium of claim 20, wherein the processes associated with the at least one watchlist comprise nominating membership of entities to the at least one watchlist, approving membership of entities to the at least one watchlist, denying membership of entities to the at least one watchlist, and removing membership of entities from the at least one watchlist.

25. The computer readable medium of claim 24, wherein the access information comprises at least one password for at least one process.