System and method for securing sensitive data

• US 9,195,844 B2
• Filed: 05/20/2013
• Issued: 11/24/2015
• Est. Priority Date: 05/20/2013
• Status: Active Grant

• Current Assignee: Hand Held Products Incorporated (Honeywell International Inc.)
• Original Assignee: Hand Held Products Incorporated (Honeywell International Inc.)
• Inventors: Todeschini, Erik, Deloge, Stephen P., Anderson, Donald
• Primary Examiner(s): To, Baotran N
• Application Number:
  US13/897,907
• Publication Number:
  US 20140344943A1
• Time in Patent Office: 918 Days
• Field of Search: 726/26
• US Class Current: 1/1
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials

Abstract

An approach is provided for securing data in a technical environment. In one embodiment, a processor obtains a first file, which when executed installs a first portion of a second file and an assembly key to assemble the second file. The processor executes this first file and then obtains the second portion of the second file. The processor assembles the second file using the first portion, the second portion, and the assembly key.

Claims

1. A method for securing sensitive data in a technical environment, the method comprising:

obtaining, by a processor, a first file, wherein upon execution by a processor the first file installs on a memory a first portion of a second file and an assembly key to assemble the second file, the assembled second file comprising the first portion of the second file and a second portion of the second file;

executing, by the processor, the first file;

obtaining, by the processor, the second portion of the second file; and

assembling, by the processor, with the assembly key, the second file, wherein the assembled second file comprises the first portion of the second file and the second portion of the second file;

wherein the first portion of the second file comprises bytes with no logical meaning and the second portion of the second file comprises bytes with no logical meaning and wherein the assembled second file has logical meaning; and

wherein the first file comprises an application program that executes the assembled second file.

2. The method of claim 1, further comprising:

loading the assembled second file into a random access memory.

3. The method of claim 1, wherein the assembled second file is an encrypted and compressed file.

4. The method of claim 3, further comprising:

responsive to assembling the second file, decrypting and decompressing the second file.

5. The method of claim 1, wherein the assembly key comprises a randomly generated number sequence.

6. The method of claim 1, wherein the first portion of the second file comprises a first group of consecutive bytes from the assembled second file, wherein the second portion of the second file comprises a second group of consecutive bytes from the assembled second file, and wherein the second group of bytes follows the first group of bytes sequentially in the assembled second file.

7. The method of claim 1, wherein the assembly key comprises a randomly generated number sequence and wherein each number in the assembly key represents a group of consecutive bytes of the second file distributed in one of the first portion of the second file or the second portion of the second file.

8. The method of claim 7, wherein a first group of alternating numbers of the assembly key beginning with the first number of the assembly key represent bytes of the second file in the first portion of the second file and a second group of alternating numbers beginning with the second number of the assembly key represent bytes in the second portion of the second file.

9. The method of claim 1, wherein the assembled second file is at least one of:

a dynamic library, a data structure, an executable file.

10. The method of claim 1, further comprising:

loading the assembled second file into a random access memory and deleting the second portion of the second file from a file system in the technical environment.

11. The method of claim 10, further comprising:

performing the loading and the deleting concurrently.

12. The method of claim 1, further comprising:

loading the assembled second file into a random access memory and utilizing the first file to access the second file in the RAM.

13. A computer program product for securing data in a technical environment, the computer program product comprising a non-transitory computer readable storage medium and program code stored on the computer readable storage medium, the program code executable by a processing circuit to perform a method comprising:

obtaining, by a processor, a first file, wherein upon execution by a processor the first file installs on a memory a first portion of a second file and an assembly key to assemble the second file, the assembled second file comprising the first portion of the second file and a second portion of the second file;

executing, by the processor, the first file;

obtaining, by the processor, the second portion of the second file; and

assembling, by the processor, with the assembly key, the assembled second file, wherein the assembled second file comprises the first portion of the second file and the second portion of the second file;

wherein the assembly key comprises a randomly generated number sequence and wherein each number in the assembly key represents a group of consecutive bytes of the assembled second file distributed in one of the first portion of the second file or the second portion of the second file.

14. The computer program product of claim 13, further comprising:

loading the assembled second file into a random access memory.

15. The computer program product of claim 13, wherein the second file is an encrypted and compressed file, the method further comprising:

responsive to assembling the second file, decrypting and decompressing the second file.

16. The computer program product of claim 13, wherein the first file comprises an application program accessing the second file in the RAM.

17. The computer program product of claim 13, further comprising utilizing the first file to access the second file in RAM.

18. The computer program product of claim 13, wherein the assembled second file is at least one of:

a dynamic library, a data structure, an executable file.

19. A computer system for securing data in a technical environment, the computer system comprising a non-transitory computer readable storage medium, a processor, a file system, and program code stored on the computer readable storage medium and executable by the processor to perform a method comprising:

obtaining, by a processor, a first file, wherein upon execution by a processor the first file installs on a memory a first portion of a second file and an assembly key to assemble the second file, the assembled second file comprising the first portion of the second file and a second portion of the second file;

executing, by the processor, the first file;

obtaining, by the processor, the second portion of the second file; and

assembling, by the processor, with the assembly key, the assembled second file, wherein the second file comprises the first portion of the second file and the second portion of the second file;

wherein the assembly key comprises a randomly generated number sequence and wherein each number in the assembly key represents a group of consecutive bytes of the assembled second file distributed in one of the first portion of the second file or the second portion of the second file.

20. The computer system of claim 19, the method further comprising:

loading the assembled second file into a random access memory; and

deleting the second portion of the second file from the file system.