CONTEXT AWARE DATA PROTECTION

• US 20110296430A1
• Filed: 05/27/2010
• Published: 12/01/2011
• Est. Priority Date: 05/27/2010
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Saxena, Atul, Nagaratnam, Nataraj, Jandhyala, Srinivas, Jhoney, Albee, Muppidi, Sridhar R.
• Application Number:
  US12/789,184
• Publication Number:
  US 20110296430A1
• Time in Patent Office: Days
• US Class Current: 718/108
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database

Abstract

A method, system, and computer usable program product for context aware data protection. Information about an access context is received in a data processing system. A resource affected by the access context is identified. The identification of the resource may include deriving knowledge about resource by making an inference from a portion of contents of the resource that the access context affects the resource, making an inference that the access context affects a second resource thereby inferring that the resource has to be modified, determining that the access context is relevant to the resource, or a combination thereof. The resource is received. A policy that is applicable to the access context is identified. A part of the resource to modify according to the policy is determined. The part is modified according to the policy and the access context to form a modified resource. The modified resource is transmitted.

Claims

1. A computer implemented method for context aware data protection, the computer implemented method comprising:

receiving information about an access context in a data processing system;

identifying a resource affected by the access context, the resource being data;

receiving the resource;

identifying a policy corresponding to the access context;

determining a part of the resource to modify according to the policy;

modifying the part according to the policy and the access context to form a modified resource; and

transmitting the modified resource.

2. The computer implemented method of claim 1, wherein receiving the information about the access context is asynchronous with a request for the resource.

3. The computer implemented method of claim 1, wherein the access context is an access context change that can occur.

4. The computer implemented method of claim 3, wherein the information about the access context is received on a system distinct from the data processing system providing the information.

5. The computer implemented method of claim 1, wherein the resource is a configuration of a repository.

6. The computer implemented method of claim 1, wherein the resource includes content of the resource, attributes associated with the resource, parameters associated with the resource, and a configuration associated with the resource.

7. The computer implemented method of claim 1, wherein identifying the resource includes:

deriving knowledge about resource, deriving the knowledge further including making an inference that the access context affects a second resource thereby inferring that the resource has to be modified.

8. The computer implemented method of claim 1, wherein the access context comprises a plurality of individual access contexts and the modifying is responsive to an individual access context.

9. The computer implemented method of claim 1, wherein modifying the resource comprises preparing information usable to modify the part according to the policy at an access context unaware system, and wherein the transmitting comprises providing the information usable to modify the resource to the access context unaware system wherein the access context unaware system applies the information to the resource in an access context unaware enforcement of the policy to form the modified resource at the access context unaware system.

10. The computer implemented method of claim 1, wherein the access context is information associated with an environment in which a request for the resource is being made.

11. A computer usable program product comprising a computer usable storage medium including computer usable code for context aware data protection, the computer usable code comprising:

computer usable code for receiving information about an access context in a data processing system;

computer usable code for identifying a resource affected by the access context;

computer usable code for receiving the resource;

computer usable code for identifying a policy corresponding to the access context;

computer usable code for determining a part of the resource to modify according to the policy;

computer usable code for modifying the part according to the policy and the access context to form a modified resource; and

computer usable code for transmitting the modified resource.

12. The computer usable program product of claim 11, wherein receiving the information about the access context is asynchronous with a request for the resource.

13. The computer usable program product of claim 11, wherein the access context is an access context change that can occur.

14. The computer usable program product of claim 11, wherein the resource is a configuration of a repository.

15. The computer usable program product of claim 11, wherein the computer usable code for identifying the resource includes:

computer usable code for deriving knowledge about resource, the deriving the knowledge further including making an inference that the access context affects a second resource thereby inferring that the resource has to be modified.

16. The computer usable program product of claim 11, wherein the access context comprises a plurality of individual access contexts and the modifying is responsive to an individual access context.

17. The computer usable program product of claim 11, wherein the computer usable code for modifying the resource comprises computer usable code for preparing information usable to modify the part according to the policy at an access context unaware system, and wherein the computer usable code for transmitting comprises computer usable code for providing the information usable to modify the resource to the access context unaware system wherein the access context unaware system applies the information to the resource in an access context unaware enforcement of the policy to form the modified resource at the access context unaware system.

18. The computer usable program product of claim 11, wherein the computer usable code is stored in a computer readable storage medium in a data processing system, and wherein the computer usable code is transferred over a network from a remote data processing system.

19. The computer usable program product of claim 11, wherein the computer usable code is stored in a computer readable storage medium in a server data processing system, and wherein the computer usable code is downloaded over a network to a remote data processing system for use in a computer readable storage medium associated with the remote data processing system.

20. A data processing system for context aware data protection, the data processing system comprising:

a storage device including a storage medium, wherein the storage device stores computer usable program code; and

a processor, wherein the processor executes the computer usable program code, and wherein the computer usable program code comprises;

computer usable code for receiving information about an access context in a data processing system;

computer usable code for identifying a resource affected by the access context;

computer usable code for receiving the resource;

computer usable code for identifying a policy corresponding to the access context;

computer usable code for determining a part of the resource to modify according to the policy;

computer usable code for modifying the part according to the policy and the access context to form a modified resource; and

computer usable code for transmitting the modified resource.

21. A computer implemented method for context aware data protection, the computer implemented method comprising:

providing a set of parameters representing a state model, the state model representing an access context in a data processing system;

providing a set of policies in a policy repository, the set of policies being usable for managing access to a set of resources, resources in the set of resources being data;

detecting a change in the access context by detecting a change in a parameter in the set of parameters;

identifying a resource affected by the access context change;

identifying a policy corresponding to the access context change;

identifying a context unaware access control enforcement component that manages access to the resource;

modifying the context unaware access control enforcement component according to the policy thereby managing access to the resource with awareness of the access context change.

22. The computer implemented method of claim 21, wherein receiving the information about the access context change is asynchronous with a request for the resource.

23. The computer implemented method of claim 21, wherein the resource is a configuration of a data repository, the context unaware access control enforcement component being a component of the data repository.

24. The computer implemented method of claim 21, wherein the resource includes data of resource, attributes associated with the data, parameters associated with the data, and a configuration associated with the data.

25. The computer implemented method of claim 21, wherein identifying the resource includes:

deriving knowledge about resource, deriving the knowledge further including making an inference that the access context affects a second resource thereby inferring that the context unaware access control enforcement component has to be modified.