File origin determination

• US 9,910,967 B2
• Filed: 07/27/2015
• Issued: 03/06/2018
• Est. Priority Date: 07/27/2015
• Status: Active Grant

• Current Assignee: Kyndryl Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Childress, Rhonda L., Spisak, Michael J., Stark, George E.
• Primary Examiner(s): ZHAO, DON GORDON
• Application Number:
  US14/809,848
• Publication Number:
  US 20170032107A1
• Time in Patent Office: 953 Days
• CPC Class Codes: G06F 21/105 Arrangements for software license management or administration, e.g. for managing licenses at corporate level
• CPC Class Codes: G06F 21/107 License processing; Key processing

Abstract

A file validation method and system is provided. The method includes retrieving from an authoritative source system, an artifact file. Identification information identifying a requesting user of the artifact file is recorded and associated metadata and a modified artifact file comprising the metadata combined with the artifact file are generated. An encryption key including a first portion and a second portion is generated and the first portion is stored within a central key store database. An encrypted package comprising the modified artifact file and the second portion of the key is generated.

Claims

1. A file validation method comprising:

retrieving, by a computer processor of a computing system, via a fetch component external to said computing system, from an authoritative source system, an artifact file;

recording, by said computer processor, identification information identifying a requesting user of said artifact file;

generating, by said computer processor, metadata describing said identification information, wherein said metadata comprises attributes an IP address for said computing system and an identifier for a network receiving said artifact file;

encrypting, by said processor, said metadata resulting in encrypted metadata;

generating, by said processor, a log indicating that said encrypted metadata has been successfully generated;

generating, by said computer processor, a modified artifact file comprising said encrypted metadata combined with said artifact file and said log;

validating, by said processor, that said modified artifact file is in compliance with a licensing agreement for execution of said artifact file resulting in the generation of a portable binary for execution;

generating, by said computer processor, an encryption key comprising a first portion and a second portion;

storing, by said computer processor, said first portion of said key within a central key store database; and

generating, by said computer processor, an encrypted package comprising said modified artifact file and said second portion of said key.

2. The method of claim 1, further comprising:

receiving, by said computer processor from said user, a request for distribution of said encrypted package;

determining, by said computer processor, that said user is authorized to access said encrypted package; and

retrieving, by said computer processor in response to results of said determining, said first portion of said key from said central key store database.

3. The method of claim 2, further comprising:

receiving, by said computer processor from said user, a request for installing said artifact file;

combining, by said computer processor, said first portion of said key with said second portion of said key comprised by said package;

decrypting, by said computer processor in response to results of said combining, said encrypted package resulting in a decrypted package comprising said modified artifact file;

installing, by said computer processor in an external computing system, said artifact file; and

storing, by said computer processor as a hidden file, said metadata with said installed artifact file.

4. The method of claim 3, further comprising:

validating, by said computer processor based on said metadata, an origin of said artifact file, wherein said validating comprises running said encryption key through said central key store database to retrieve said origin via said metadata.

5. The method of claim 1, wherein said information comprises data selected from the group consisting of a URL associated with a browser said computing system, an identification for said user, and a subnet used to perform said retrieving.

6. The method of claim 1, wherein said recording comprises:

recording an ID for said requesting user;

recording a Website URL associated with retrieving said artifact file; and

recording a subnet ID for said computing system.

7. The method of claim 1, wherein said identification information comprises a name of said requesting user, an email address of said requesting user, and employee related information associated with said requesting user.

8. The method of claim 1, wherein data associated with said artifact file comprises an IP address of said authoritative source system, a date and time of requesting said artifact file, and a file size of said artifact file.

9. The method of claim 1, wherein data associated with said computing system comprises an IP address of a destination system for said artifact file and a subnet associated with said artifact file.

10. The method of claim 1, wherein said metadata defines terms describing said license agreement of said artifact file.

11. The method of claim 1, further comprising:

providing at least one support service for at least one of creating, integrating, hosting, maintaining, and deploying computer-readable code in the computing system, said code being executed by the computer processor to implement said retrieving, said recording, said generating, said metadata, said generating said modified artifact file, said generating said encryption key, said storing, and said generating said encrypted package.

12. A computer program product for file validation executed by at least one processor of a computing system, the computer program product comprising:

one or more computer-readable, hardware storage devices and program instructions, stored on at least one of the one or more storage devices, to;

retrieve, via a fetch component external to said computing system, from an authoritative source system, an artifact file;

record identification information identifying a requesting user of said artifact file;

generate metadata describing said identification information, wherein said metadata comprises attributes an IP address for said computing system and an identifier for a network receiving said artifact file;

encrypt said metadata resulting in encrypted metadata;

generate a log indicating that said encrypted metadata has been successfully generated;

generate a modified artifact file comprising said encrypted metadata combined with said artifact file and said log;

validate that said modified artifact file is in compliance with a licensing agreement for execution of said artifact file resulting in the generation of a portable binary for execution;

generate an encryption key comprising a first portion and a second portion;

store said first portion of said key within a central key store database; and

generate an encrypted package comprising said modified artifact file and said second portion of said key.

13. The computer program product of claim 12, wherein said program instructions are further configured to:

receive from said user, a request for distribution of said encrypted package;

determine that said user is authorized to access said encrypted package; and

retrieve in response to results of determining that said user is authorized to access said encrypted package, said first portion of said key from said central key store database.

14. The computer program product of claim 13, wherein said program instructions are further configured to:

receive from said user, a request for installing said artifact file;

combine said first portion of said key with said second portion of said key comprised by said package;

decrypt in response to results of combining said first portion of said key with said second portion of said key, said encrypted package resulting in a decrypted package comprising said modified artifact file;

install in an external computing system, said artifact file; and

store as a hidden file, said metadata with said installed artifact file.

15. The computer program product of claim 14, wherein said program instructions are further configured to:

validate based on said metadata, an origin of said artifact file by running said encryption key through said central key store database to retrieve said origin via said metadata.

16. The computer program product of claim 12, wherein said information comprises data selected from the group consisting of a URL associated with a browser said computing system, an identification for said user, and a subnet used to perform said retrieving.

17. The computer program product of claim 12, wherein said program instructions to

record said information comprises:

first instructions to record an ID for said requesting user;

second instructions to record a Website URL associated with retrieving said artifact file; and

third instructions to record a subnet ID for said computing system.

18. The computer program product of claim 12, wherein said metadata defines terms describing said license agreement of said artifact file.