SMART RESOURCE ACCESS FOR DECRYPTED INFORMATION

• US 20170093574A1
• Filed: 09/29/2015
• Published: 03/30/2017
• Est. Priority Date: 09/29/2015
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: D'Elena, Daniel F., Martinez, Anthony E., Michelini, Vanessa V., Persaud, Vishwa
• Granted Patent: US 10,623,184 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2221/2133 Verifying human interaction, e.g., Captcha
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying

Abstract

In an approach for protecting a resource, a processor receives a resource and a parameter, wherein the parameter indicates a condition upon which the resource will be made accessible. A processor encrypts the resource. A processor associates the parameter with decryption information for the encrypted resource. A processor sends the encrypted resource to a computing device. A processor determines that the condition of the parameter has been met based on external information regarding the parameter. A processor sends the decryption information to the computing device.

Claims

1. A method for protecting a resource, the method comprising:

receiving a resource and a parameter, wherein the parameter indicates a condition upon which the resource will be made accessible;

encrypting, by one or more processors, the resource;

associating, by one or more processors, the parameter with decryption information for the encrypted resource;

sending, by one or more processors, the encrypted resource to a computing device;

determining, by one or more processors, that the condition of the parameter has been met based on external information regarding the parameter; and

sending the decryption information to the computing device.

2. The method of claim 1, wherein the condition of the parameter is an occurrence of a real world event.

3. The method of claim 1, further comprising:

receiving an indication of the external resource which contains information regarding the parameter.

4. The method of claim 1, further comprising:

identifying, by one or more processors, the external resource which contains information regarding the parameter.

5. The method of claim 1, further comprising:

informing, by one or more processors, a user of the computing device, that the decryption information is able to decrypt the encrypted resource.

6. The method of claim 1, further comprising:

subsequent to sending the encrypted resource to the computing device, receiving a request to alter the parameter associated with the decryption information; and

altering, by one or more processors, the parameter, wherein determining that the condition of the parameter has been met comprises determining, by one or more processors, that the condition of the altered parameter has been met.

7. The method of claim 2, wherein determining that the condition of the parameter has been met based on external information regarding the parameter comprises:

monitoring, by one or more processors, the external information for the occurrence of the real world event; and

determining, by one or more processors, that the real world event has occurred based on the external information.

8. A computer program product for protecting a resource, the computer program product comprising:

one or more computer readable storage media and program instructions stored on the one or more computer readable storage media, the program instructions comprising;

program instructions to receive a resource and a parameter, wherein the parameter indicates a condition upon which the resource will be made accessible;

program instructions to encrypt the resource;

program instructions to associate the parameter with decryption information for the encrypted resource;

program instructions to send the encrypted resource to a computing device;

program instructions to determine that the condition of the parameter has been met based on external information regarding the parameter; and

program instructions to send the decryption information to the computing device.

9. The computer program product of claim 8, wherein the condition of the parameter is an occurrence of a real world event.

10. The computer program product of claim 8, further comprising:

program instructions, stored on the one or more computer readable storage media, to receive an indication of the external resource which contains information regarding the parameter.

11. The computer program product of claim 8, further comprising:

program instructions, stored on the one or more computer readable storage media, to identify the external resource which contains information regarding the parameter.

12. The computer program product of claim 8, further comprising:

program instructions, stored on the one or more computer readable storage media, to inform a user of the computing device, that the decryption information is able to decrypt the encrypted resource.

13. The computer program product of claim 8, further comprising:

program instructions, stored on the one or more computer readable storage media, to, subsequent to sending the encrypted resource to the computing device, receive a request to alter the parameter associated with the decryption information; and

program instructions, stored on the one or more computer readable storage media, to alter the parameter, wherein program instructions to determine that the condition of the parameter has been met comprise program instructions to determine that the condition of the altered parameter has been met.

14. The computer program product of claim 9, wherein program instructions to determine that the condition of the parameter has been met based on external information regarding the parameter comprise:

program instructions to monitor the external information for the occurrence of the real world event; and

program instructions to determine that the real world event has occurred based on the external information.

15. A computer system for protecting a resource, the computer system comprising:

one or more computer processors, one or more computer readable storage media, and program instructions stored on the computer readable storage media for execution by at least one of the one or more processors, the program instructions comprising;

program instructions to receive a resource and a parameter, wherein the parameter indicates a condition upon which the resource will be made accessible;

program instructions to encrypt the resource;

program instructions to associate the parameter with decryption information for the encrypted resource;

program instructions to send the encrypted resource to a computing device;

program instructions to determine that the condition of the parameter has been met based on external information regarding the parameter; and

program instructions to send the decryption information to the computing device.

16. The computer system of claim 15, wherein the condition of the parameter is an occurrence of a real world event.

17. The computer system of claim 15, further comprising:

program instructions, stored on the computer readable storage media for execution by at least one of the one or more processors, to receive an indication of the external resource which contains information regarding the parameter.

18. The computer system of claim 15, further comprising:

program instructions, stored on the computer readable storage media for execution by at least one of the one or more processors, to identify the external resource which contains information regarding the parameter.

19. The computer system of claim 15, further comprising:

program instructions, stored on the computer readable storage media for execution by at least one of the one or more processors, to inform a user of the computing device, that the decryption information is able to decrypt the encrypted resource.

20. The computer system of claim 15, further comprising:

program instructions, stored on the computer readable storage media for execution by at least one of the one or more processors, to, subsequent to sending the encrypted resource to the computing device, receive a request to alter the parameter associated with the decryption information; and

program instructions, stored on the computer readable storage media for execution by at least one of the one or more processors, to alter the parameter, wherein program instructions to determine that the condition of the parameter has been met comprise program instructions to determine that the condition of the altered parameter has been met.