SYSTEM AND METHOD FOR SECURING SENSITIVE DATA

• US 20140344943A1
• Filed: 05/20/2013
• Published: 11/20/2014
• Est. Priority Date: 05/20/2013
• Status: Active Grant

• Current Assignee: Hand Held Products Incorporated (Honeywell International Inc.)
• Original Assignee: Hand Held Products Incorporated (Honeywell International Inc.)
• Inventors: Todeschini, Erik, Deloge, Stephen P., Anderson, Donald
• Granted Patent: US 9,195,844 B2
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials

Abstract

An approach is provided for securing data in a technical environment. In one embodiment, a processor obtains a first file, which when executed installs a first portion of a second file and an assembly key to assemble the second file. The processor executes this first file and then obtains the second portion of the second file. The processor assembles the second file using the first portion, the second portion, and the assembly key.

Claims

1. A method for securing sensitive data in a technical environment, the method comprising:

obtaining, by a processor, a first file, wherein upon execution by a processor the first file installs on a memory a first portion of a second file and an assembly key to assemble the second file, the assembled second file comprising the first portion of the second file and a second portion of the second file;

executing, by the processor, the first file;

obtaining, by the processor, the second portion of the second file; and

assembling, by the processor, with the assembly key, the second file, wherein the second file comprises the first portion of the second file and the second portion of the second file.

2. The method of claim 1, further comprising:

loading the assembled second file into a random access memory.

3. The method of claim 1, wherein the second file is an encrypted and compressed file.

4. The method of claim 3, further comprising:

responsive to assembling the second file, decrypting and decompressing the second file.

5. The method of claim 1, wherein the first file is an application program file that executes the second file and wherein the first portion of the second file comprises bytes with no logical meaning and the second portion of the second file comprises bytes with no logical meaning and wherein the second file has logical meaning, the second file created by assembling the first portion of the second file and the second portion of the second file with the assembly key.

6. The method of claim 5, wherein the assembly key comprises a randomly generated number sequence.

7. The method of claim 6, wherein the first portion of the second file comprises a first group of consecutive bytes in the second file, wherein the second portion of the second file comprises a second group of consecutive bytes in the second file, and wherein the second group of bytes follows the first group of bytes sequentially in the assembled second file.

8. The method of claim 6, wherein each number in the assembly key represents a group of consecutive bytes of the second file distributed in one of the first portion of the second file or the second portion of the second file.

9. The method of claim 8, wherein a first group of alternating numbers of the assembly key beginning with the first number of the assembly key represent bytes of the second file in the first portion of the second file and a second group of alternating numbers beginning with the second number of the assembly key represent bytes in the second portion of the second file.

10. The method of claim 1, wherein the assembled second file is at least one of:

a dynamic library, a data structure, an executable.

11. The method of claim 1, further comprising:

deleting the second portion of the second file from a file system in the technical environment.

12. The method of claim 11, further comprising:

performing the loading and the deleting concurrently.

13. The method of claim 2, further comprising:

utilizing the first file to access the second file in RAM.

17. The computer program product of claim 13, wherein the first file is an application program accessing the second file in RAM.

14. A computer program product for securing data in a technical environment, the computer program product comprising a computer readable storage medium and program code stored on the computer readable storage medium, the program code executable by a processing circuit to perform a method comprising:

obtaining, by a processor, a first file, wherein upon execution by a processor the first file installs on a memory a first portion of a second file and an assembly key to assemble the second file, the assembled second file comprising the first portion of the second file and a second portion of the second file;

executing, by the processor, the first file;

obtaining, by the processor, the second portion of the second file; and

assembling, by the processor, with the assembly key, the second file, wherein the second file comprises the first portion of the second file and the second portion of the second file.

15. The computer program product of claim 14, further comprising:

loading the assembled second file into a random access memory.

16. The computer program product of claim 14, wherein the second file is an encrypted and compressed file, the method further comprising:

responsive to assembling the second file, decrypting and decompressing the second file.

18. The computer program product of claim 15, wherein the assembly key comprises a randomly generated number sequence and wherein each number in the assembly key represents a group of consecutive bytes of the second file distributed in one of the first portion of the second file or the second portion of the second file.

19. A computer system for securing data in a technical environment, the computer system comprising a computer readable storage medium, a processor, a file system, and program code stored on the computer readable storage medium and executable by the processor to perform a method comprising:

obtaining, by a processor, a first file, wherein upon execution by a processor the first file installs on a memory a first portion of a second file and an assembly key to assemble the second file, the assembled second file comprising the first portion of the second file and a second portion of the second file;

executing, by the processor, the first file;

obtaining, by the processor, the second portion of the second file; and

assembling, by the processor, with the assembly key, the second file, wherein the second file comprises the first portion of the second file and the second portion of the second file.

20. The computer system of claim 19, the method further comprising:

loading the assembled second file into a random access memory; and

deleting the second portion of the second file from the file system.