Data network and method for checking nodes of a data network
First Claim
Patent Images
1. A method for checking nodes or information stored at nodes of a data network, said nodes being connected with data transmission paths, said method comprising:
- providing an automatically searchable mark located at a first node for association with one or both of;
a stored information and the first node, the automatically searchable mark corresponding to a privacy policy for controlling storage of, transfer of, or access to the stored information or, controlling access to the first node;
said automatically searchable mark further defining one or more of;
a permissible storage place where a marked information is permissibly stored, a permissible data transmission path for accessing the marked information or a marked node or, a permissible data transmission path in which the marked information could be permissibly transferred, said automatically searchable mark enabling a prior determination where in said data network a data may reside; and
,traversing, by a search engine, said data network to detect and analyze an automatically searchable mark in said data network for detecting the places on which the marked information is stored in said data network and detecting possible data transmission paths for accessing the marked information or the marked node or, detecting a possible data transmission path for transferring the marked information in said data network;
comparing, by the search engine, the detected storage place of the marked information with the permissible storage place that is defined by the automatically searchable mark of the marked information and checking whether the privacy policy is maintained, and comparing the detected possible data transmission paths for transferring the marked information or for accessing the marked information or the marked node with the data transmission paths that are defined by the automatically searchable mark of the marked information or by the automatically searchable mark of the marked node, and determining whether the privacy policy is maintained, andgenerating, by the search engine, an alarm upon determining a privacy policy violation.
2 Assignments
0 Petitions
Accused Products
Abstract
The invention provides a data network, systems and methods for checking nodes of a data network that are used for detecting whether a privacy policy concerning an information is maintained. The information comprises a mark corresponding to the privacy policy. The mark defines the storage place or the accessing paths or the transferring paths of the information. The mark is automatically searchable. The mark is searched, analyzed and checked as to whether the privacy policy is maintained. The advantage of the system is that vulnerabilities of systems for protecting confidential information may be detected a long time before an attack on the confidential information occurs.
6 Citations
6 Claims
-
1. A method for checking nodes or information stored at nodes of a data network, said nodes being connected with data transmission paths, said method comprising:
-
providing an automatically searchable mark located at a first node for association with one or both of;
a stored information and the first node, the automatically searchable mark corresponding to a privacy policy for controlling storage of, transfer of, or access to the stored information or, controlling access to the first node;
said automatically searchable mark further defining one or more of;
a permissible storage place where a marked information is permissibly stored, a permissible data transmission path for accessing the marked information or a marked node or, a permissible data transmission path in which the marked information could be permissibly transferred, said automatically searchable mark enabling a prior determination where in said data network a data may reside; and
,traversing, by a search engine, said data network to detect and analyze an automatically searchable mark in said data network for detecting the places on which the marked information is stored in said data network and detecting possible data transmission paths for accessing the marked information or the marked node or, detecting a possible data transmission path for transferring the marked information in said data network; comparing, by the search engine, the detected storage place of the marked information with the permissible storage place that is defined by the automatically searchable mark of the marked information and checking whether the privacy policy is maintained, and comparing the detected possible data transmission paths for transferring the marked information or for accessing the marked information or the marked node with the data transmission paths that are defined by the automatically searchable mark of the marked information or by the automatically searchable mark of the marked node, and determining whether the privacy policy is maintained, and generating, by the search engine, an alarm upon determining a privacy policy violation. - View Dependent Claims (2, 3, 4, 5, 6)
-
Specification
-
- Resources
Litigation Campaign Assessment
Thank you for your request. You will receive a custom alert email when the Litigation Campaign Assessment is available.
×
-
Current AssigneeTrend Micro Inc.
-
Original AssigneeInternational Business Machines Corporation
-
InventorsBaum-Waidner, Birgit, WAIDNER, MICHAEL, Kenyon, Christopher
-
Primary Examiner(s)Truong, Thanhnga
-
Assistant Examiner(s)Zee, Edward
-
Application NumberUS10/899,767Publication NumberTime in Patent Office1,477 DaysField of Search726/3, 726/23, 726/27, 726/22, 726/25US Class Current726/23CPC Class CodesH04L 63/102 Entity profilesH04L 63/1408 by monitoring network traff...
