MANAGING DATA HANDLING POLICIES

• US 20140282835A1
• Filed: 03/15/2013
• Published: 09/18/2014
• Est. Priority Date: 03/15/2013
• Status: Active Grant

• Current Assignee: TrustArc, Inc.
• Original Assignee: True Ultimate Standards Everywhere, Inc.
• Inventors: Guinan, Daniel J.
• Granted Patent: US 9,864,873 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04W 12/08 Access security

Abstract

A method, computer usable program product or system for automatically sharing a set of sensitive data in accordance with a set of predetermined policy requirements including receiving across a network a set of certified policy commitments for a node; authenticating the set of certified policy commitments; utilizing a processor to automatically determine whether the set of certified policy commitments satisfies the set of predetermined policy requirements; and upon a positive determination, transmitting across the network the set of sensitive data to the node.

Claims

1. A method of automatically sharing a set of sensitive data in accordance with a set of predetermined policy requirements comprising:

receiving across a network a set of certified policy commitments for a node;

authenticating the set of certified policy commitments;

utilizing a processor to automatically determine whether the set of certified policy commitments satisfies the set of predetermined policy requirements; and

upon a positive determination, transmitting across the network the set of sensitive data to the node.

2. The method of claim 1 wherein the certified policy commitments are authenticated by utilizing a public key of a certifying authority.

3. The method of claim 2 wherein the set of certified policy commitments was encrypted by a private key of the certifying authority.

4. The method of claim 3 wherein the certifying authority was previously approved as a trusted certifying authority.

5. The method of claim 4 wherein the certifying authority was approved as a trusted certifying authority by a previously approved certifying authority.

6. The method of claim 1 further comprising authenticating an identity of the node from the set of certified policy commitments.

7. The method of claim 1 further comprising receiving a request for the set of sensitive data is received from the node across the network;

establishing a secure communication pathway with the node across the network; and

sending a request for the set of certified policy commitments to the node;

wherein the set of sensitive data is transmitted across the secure communication pathway.

8. The method of claim 1 wherein the set of policy commitments is selected from a standard set of policy commitments.

9. The method of claim 8 wherein the standard set of policy commitments is hierarchically consistent.

10. The method of claim 1 further comprising upon a negative determination, transmitting a request to the node across the network for an exception to the set of certified policy commitments.

11. The method of claim 10 further comprising receiving an exception to the set of certified policy commitments from the node across the network.

12. The method of claim 11 wherein the exception is a certified exception that can be authenticated by using a public key of a certifying authority.

13. The method of claim 5 further comprising authenticating an identity of the node from the set of certified policy commitments;

receiving a request for the set of sensitive data is received from the node across the network;

establishing a secure communication pathway with the node across the network;

sending a request for the set of certified policy commitments to the node;

upon a negative determination, transmitting a request to the node across the network for an exception to the set of certified policy commitments; and

receiving an exception to the set of certified policy commitments from the node across the network;

wherein the set of sensitive data is transmitted across the secure communication pathway;

wherein the set of policy commitments is selected from a standard set of policy commitments; and

wherein the exception is a certified exception that can be authenticated by using a public key of a certifying authority.

14. A computer usable program product comprising a computer usable storage medium including computer usable code for use in automatically sharing a set of sensitive data in accordance with a set of predetermined policy requirements, the computer usable program product comprising code for performing the steps of:

receiving across a network a set of certified policy commitments for a node;

authenticating the set of certified policy commitments;

utilizing a processor to automatically determine whether the set of certified policy commitments satisfies the set of predetermined policy requirements; and

upon a positive determination, transmitting across the network the set of sensitive data to the node.

15. The computer usable program product of claim 14 wherein the certified policy commitments are authenticated by utilizing a public key of a certifying authority.

16. The computer usable program product of claim 15 wherein the set of certified policy commitments was encrypted by a private key of the certifying authority.

17. The computer usable program product of claim 16 wherein the certifying authority was previously approved as a trusted certifying authority.

18. The computer usable program product of claim 17 wherein the certifying authority was approved as a trusted certifying authority by a previously approved certifying authority.

19. The computer usable program product of claim 14 further comprising code for performing the step of authenticating an identity of the node from the set of certified policy commitments.

20. The computer usable program product of claim 14 further comprising code for performing the steps of receiving a request for the set of sensitive data is received from the node across the network;

establishing a secure communication pathway with the node across the network; and

sending a request for the set of certified policy commitments to the node;

wherein the set of sensitive data is transmitted across the secure communication pathway.

21. The computer usable program product of claim 14 wherein the set of policy commitments is selected from a standard set of policy commitments.

22. The computer usable program product of claim 21 wherein the standard set of policy commitments is hierarchically consistent.

23. The computer usable program product of claim 14 further comprising code for performing the step of upon a negative determination, transmitting a request to the node across the network for an exception to the set of certified policy commitments.

24. The computer usable program product of claim 23 further comprising code for performing the step of receiving an exception to the set of certified policy commitments from the node across the network.

25. The computer usable program product of claim 24 wherein the exception is a certified exception that can be authenticated by using a public key of a certifying authority.

26. A data processing system for automatically sharing a set of sensitive data in accordance with a set of predetermined policy requirements, the data processing system comprising:

a processor; and

a memory storing program instructions which when executed by the processor execute the steps of;

receiving across a network a set of certified policy commitments for a node;

authenticating the set of certified policy commitments;

utilizing the processor to automatically determine whether the set of certified policy commitments satisfies the set of predetermined policy requirements; and

upon a positive determination, transmitting across the network the set of sensitive data to the node.

27. The data processing system of claim 26 wherein the certified policy commitments are authenticated by utilizing a public key of a certifying authority.

28. The data processing system of claim 27 wherein the set of certified policy commitments was encrypted by a private key of the certifying authority.

29. The data processing system of claim 28 wherein the certifying authority was previously approved as a trusted certifying authority.

30. The data processing system of claim 29 wherein the certifying authority was approved as a trusted certifying authority by a previously approved certifying authority.

31. The data processing system of claim 26 further comprising authenticating an identity of the node from the set of certified policy commitments.

32. The data processing system of claim 26 further comprising receiving a request for the set of sensitive data is received from the node across the network;

establishing a secure communication pathway with the node across the network; and

sending a request for the set of certified policy commitments to the node;

wherein the set of sensitive data is transmitted across the secure communication pathway.

33. The data processing system of claim 26 wherein the set of policy commitments is selected from a standard set of policy commitments.

34. The data processing system of claim 33 wherein the standard set of policy commitments is hierarchically consistent.

35. The data processing system of claim 26 further comprising upon a negative determination, transmitting a request to the node across the network for an exception to the set of certified policy commitments.

36. The data processing system of claim 35 further comprising receiving an exception to the set of certified policy commitments from the node across the network.

37. The data processing system of claim 36 wherein the exception is a certified exception that can be authenticated by using a public key of a certifying authority.