FILE ORIGIN DETERMINATION

• US 20190332745A1
• Filed: 07/08/2019
• Published: 10/31/2019
• Est. Priority Date: 07/27/2015
• Status: Active Grant

• Current Assignee: Kyndryl Incorporated (Kyndryl Holdings, Inc.)
• Original Assignee: International Business Machines Corporation
• Inventors: Childress, Rhonda L., Spisak, Michael J., Stark, George E.
• Granted Patent: US 10,902,094 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/105 Arrangements for software license management or administration, e.g. for managing licenses at corporate level
• CPC Class Codes: G06F 21/107 License processing; Key processing

Abstract

A file validation method and system is provided. The method includes retrieving from an authoritative source system, an artifact file. Identification information identifying a requesting user of the artifact file is recorded and associated metadata and a modified artifact file comprising the metadata combined with the artifact file are generated. An encryption key including a first portion and a second portion is generated and the first portion is stored within a central key store database. An encrypted package comprising the modified artifact file and the second portion of the key is generated.

Claims

1. A file validation method comprising:

generating, by a computer processor of a computing system, metadata describing identification information identifying a requesting user of an artifact file retrieved, via a fetch component external to said computing system, from an authoritative source system, wherein said metadata comprises attributes including an IP address for said computing system and an identifier for a network receiving said artifact file;

generating, by said computer processor, a modified artifact file comprising encrypted metadata combined with said artifact file and a log indicating that said encrypted metadata has been successfully generated from said metadata;

validating, by said processor, that said modified artifact file is in compliance with a licensing agreement for execution of said artifact file resulting in the generation of a portable binary for execution;

generating, by said computer processor, an encryption key comprising a first portion and a second portion;

storing, by said computer processor, said first portion of said key within a central key store database; and

generating, by said computer processor, an encrypted package comprising said modified artifact file and said second portion of said key.

2. The method of claim 1, further comprising:

receiving, by said computer processor from said user, a request for distribution of said encrypted package;

determining, by said computer processor, that said user is authorized to access said encrypted package; and

retrieving, by said computer processor in response to results of said determining, said first portion of said key from said central key store database.

3. The method of claim 2, further comprising:

receiving, by said computer processor from said user, a request for installing said artifact file;

combining, by said computer processor, said first portion of said key with said second portion of said key comprised by said package;

decrypting, by said computer processor in response to results of said combining, said encrypted package resulting in a decrypted package comprising said modified artifact file;

installing, by said computer processor in an external computing system, said artifact file; and

storing, by said computer processor as a hidden file, said metadata with said installed artifact file.

4. The method of claim 3, further comprising:

validating, by said computer processor based on said metadata, an origin of said artifact file, wherein said validating comprises running said encryption key through said central key store database to retrieve said origin via said metadata.

5. The method of claim 1, wherein said information comprises data selected from the group consisting of a URL associated with a browser said computing system, an identification for said user, and a subnet used to perform said retrieving.

6. The method of claim 1, wherein said recording comprises:

recording an ID for said requesting user;

recording a Website URL associated with retrieving said artifact file; and

recording a subnet ID for said computing system.

7. The method of claim 1, wherein said identification information comprises a name of said requesting user, an email address of said requesting user, and employee related information associated with said requesting user.

8. The method of claim 1, wherein data associated with said artifact file comprises an IP address of said authoritative source system, a date and time of requesting said artifact file, and a file size of said artifact file.

9. The method of claim 1, wherein data associated with said computing system comprises an IP address of a destination system for said artifact file and a subnet associated with said artifact file.

10. The method of claim 1, wherein said metadata defines terms describing said license agreement of said artifact file.

11. The method of claim 1, further comprising:

providing at least one support service for at least one of creating, integrating, hosting, maintaining, and deploying computer-readable code in the computing system, said code being executed by the computer processor to implement said generating said metadata, said generating said modified artifact file, said generating said encryption key, said storing, and said generating said encrypted package.

12. A computer program product for file validation executed by at least one processor of a computing system, the computer program product comprising:

one or more computer-readable, hardware storage devices and program instructions, stored on at least one of the one or more storage devices, to;

generate metadata describing identification information identifying a requesting user of an artifact file retrieved, via a fetch component external to said computing system, from an authoritative source system, wherein said metadata comprises attributes including an IP address for said computing system and an identifier for a network receiving said artifact file;

generate a modified artifact file comprising encrypted metadata combined with said artifact file and a log indicating that said encrypted metadata has been successfully generated from said metadata;

validate that said modified artifact file is in compliance with a licensing agreement for execution of said artifact file resulting in the generation of a portable binary for execution;

generate an encryption key comprising a first portion and a second portion;

store said first portion of said key within a central key store database; and

generate an encrypted package comprising said modified artifact file and said second portion of said key.

13. The computer program product of claim 12, wherein said program instructions are further configured to:

receive from said user, a request for distribution of said encrypted package;

determine that said user is authorized to access said encrypted package; and

retrieve in response to results of determining that said user is authorized to access said encrypted package, said first portion of said key from said central key store database.

14. The computer program product of claim 13, wherein said program instructions are further configured to:

receive from said user, a request for installing said artifact file;

combine said first portion of said key with said second portion of said key comprised by said package;

decrypt in response to results of combining said first portion of said key with said second portion of said key, said encrypted package resulting in a decrypted package comprising said modified artifact file;

install in an external computing system, said artifact file; and

store as a hidden file, said metadata with said installed artifact file.

15. The computer program product of claim 14, wherein said program instructions are further configured to validate based on said metadata, an origin of said artifact file by running said encryption key through said central key store database to retrieve said origin via said metadata.

16. The computer program product of claim 12, wherein said information comprises data selected from the group consisting of a URL associated with a browser said computing system, an identification for said user, and a subnet used to perform said retrieving.

17. The computer program product of claim 12, wherein said program instructions to record said information comprises:

first instructions to record an ID for said requesting user;

second instructions to record a Website URL associated with retrieving said artifact file; and

third instructions to record a subnet ID for said computing system.

18. The computer program product of claim 14, wherein said metadata defines terms describing said license agreement of said artifact file.