Method for providing secure access to information held in a shared repository

• US 7,203,839 B2
• Filed: 02/21/2006
• Issued: 04/10/2007
• Est. Priority Date: 02/22/2002
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Trevathan, Matthew Bunkley, Richards, Patrick James Jr.
• Primary Examiner(s): PYZOCHA, MICHAEL J
• Assistant Examiner(s): Schubert; Kevin
• Application Number:
  US11/358,812
• Publication Number:
  US 20060143468A1
• Time in Patent Office: 413 Days
• Field of Search: 713/182, 713/184, 713/185
• US Class Current: 713/185
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials

Abstract

A method for providing secure access to information held in a shared repository, for example to electronic business cards stored on a server. A data owner registers with the server and provides information to be shared with selected data users. The server returns public-key cryptography keys. To access the information, a data user sends its public key to the data owner. The data owner encrypts the public key using the data owner private key, and sends the result to the server, along with permission to transfer information to the data user. The server decrypts the received result using the data owner public key, and compares the outcome with the data user public key. If they match, the server records permission on an access list. In response to a request for information the server checks the access list to determine whether the data user has permission. If so, the server encrypts the information using the data user public key, and transfers the result to the data user.

Claims

1. A method for providing secure access to information held in a shared repository, comprising the steps of:

storing, on a data server, information provided by a data owner;

providing, to the data owner, a data owner public key and a data owner private key, the data owner public key and the data owner private key being a first key pair of a public-key cryptography system;

providing the data owner public key to the data server;

providing, to a data user, a data user public key and a data user private key, the data user public key and the data user private key being a second key pair of the public-key cryptography system;

providing the data user public key to the data server;

sending the data user public key from the data user to the data owner;

combining, by the data owner, the data user public key and a sequence number, to provide a combination;

encrypting the combination by the data owner, using the data owner private key, to provide an encrypted combination;

sending, by the data owner to the data server, the encrypted combination and a command that gives the data server permission to transfer the information to the data user;

decrypting the encrypted combination, using the data owner public key, to provide a decrypted combination;

parsing the decrypted combination to provide a check word and a check number;

comparing the check word and the data user public key;

comparing the check number and an expected sequence number;

if the step of comparing the check word and the data user public key indicates that the check word end the data user public key match, and further if the step of comparing the check number and an expected sequence number indicates that the check number and the expected sequence number match, recording permission to transfer the information in an access list;

encrypting the data owner public key, by the data user, using the data user private key, to provide an encrypted data owner public key;

sending, from the data user to the data server, the encrypted data owner public key and a request to transfer the information to the data user;

decrypting the encrypted data owner public key, using the data user public key, to provide a second check word;

comparing the second check word and the data owner public key;

if the step of comparing the second check word and the data owner public key indicates that the second check word and the data owner public key match, checking the access list to determine whether the data server has permission to transfer the information; and

,

if the data server has permission, transferring the information from the data server to the data user.

2. The method of claim 1, further comprising the step of sending the data owner public key from the data owner to the data user.