DATA ACCESS LEVELS

• US 20180309738A1
• Filed: 04/19/2017
• Published: 10/25/2018
• Est. Priority Date: 04/19/2017
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Kumhyr, David B., Mathieu, Arnaud A., Mukherjee, Maharaj, Robertson, Michael P.
• Granted Patent: US 10,686,765 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 63/0478 applying multiple layers of encryption, e.g. nested tunnels or encrypting the content with a first key and then with at least a second key cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/1433 Vulnerability analysis
• CPC Class Codes: H04L 9/0836 using tree structure or hierarchical structure
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068

Abstract

A method, computer system, and a computer program product for securing and accessing a plurality of data levels is provided. The present invention may include gathering, by a network device, data. The present invention may also include encrypting, by a network device, a first section of data within the gathered data with a level 1 encryption key. The present invention may then include encrypting, by a network device, a second section of data within the gathered data with a level 2 encryption key. The present invention may further include transmitting, by a network device, the data to a recipient device. The present invention may also include decrypting, by the recipient device, the second section of data with the level 2 encryption key. The present invention may then include decrypting, by the recipient device, the first section of data with the level 1 encryption key.

Claims

1. A method for securing and accessing a plurality of data levels, the method comprising:

gathering, by a network device, a plurality of data;

encrypting, by a network device, a first section of data within the gathered plurality of data with a level 1 encryption key;

encrypting, by a network device, a second section of data within the gathered plurality of data with a level 2 encryption key, wherein the first section of data is a progressively encrypted section of data with the level 1 encryption key and the level 2 encryption key associated with accessing the first section of data; and

transmitting, in a single transmission by a network device, a combined batch of data to a recipient device, wherein the combined batch of data includes the progressively encrypted first section of data, the encrypted second section of data, and an unencrypted section of data.

2. The method of claim 1, further comprising:

decrypting, by the recipient device, the second section of data with the level 2 encryption key; and

decrypting, by the recipient device, the first section of data with the level 1 encryption key.

3. The method of claim 1, wherein the plurality of data is encrypted with more than two levels of encryption, and wherein the network device transmits data with more than two levels of encryption in a single transmission.

4. The method of claim 1, wherein the encrypted first section of data is associated with encryption key 1, the encrypted second section of data is associated with encryption key 2, and wherein the level 1 encryption key is a progressive encryption key.

5. The method of claim 1, wherein the network device has a hierarchical supervisory role over at least one other device, and wherein the network device has access to the encryption keys of at least one other device.

6. The method of claim 1, wherein the encryption key is chosen based on the role of a device that is encrypting data, wherein the role is a functional role, and wherein the functional role is based on the type of data gathered by the network device.

7. The method of claim 1, wherein an alternative encryption key is chosen based on a risk perceived by the network device sending data, and wherein the network device determines a level of risk.

8. A computer system for securing and accessing a plurality of data levels, comprising:

one or more processors, one or more computer-readable memories, one or more computer-readable tangible storage medium, and program instructions stored on at least one of the one or more tangible storage medium for execution by at least one of the one or more processors via at least one of the one or more memories, wherein the computer system is capable of performing a method comprising;

gathering, by a network device, a plurality of data;

encrypting, by a network device, a first section of data within the gathered plurality of data with a level 1 encryption key;

encrypting, by a network device, a second section of data within the gathered plurality of data with a level 2 encryption key, wherein the first section of data is a progressively encrypted section of data with the level 1 encryption key and the level 2 encryption key associated with accessing the first section of data; and

transmitting, in a single transmission by a network device, a combined batch of data to a recipient device, wherein the combined batch of data includes the progressively encrypted first section of data, the encrypted second section of data, and an unencrypted section of data.

9. The computer system of claim 8, further comprising:

decrypting, by the recipient device, the second section of data with the level 2 encryption key; and

decrypting, by the recipient device, the first section of data with the level 1 encryption key.

10. The computer system of claim 8, wherein the plurality of data is encrypted with more than two levels of encryption, and wherein the network device transmits data with more than two levels of encryption in a single transmission.

11. The computer system of claim 8, wherein the encrypted first section of data is associated with encryption key 1, the encrypted second section of data is associated with encryption key 2, and wherein the level 1 encryption key is a progressive encryption key.

12. The computer system of claim 8, wherein the network device has a hierarchical supervisory role over at least one other device, and wherein the network device has access to the encryption keys of at least one other device.

13. The computer system of claim 8, wherein the encryption key is chosen based on the role of a device that is encrypting data, wherein the role is a functional role, and wherein the functional role is based on the type of data gathered by the network device.

14. The computer system of claim 8, wherein an alternative encryption key is chosen based on a risk perceived by the network device sending data, and wherein the network device determines a level of risk.

15. A computer program product for securing and accessing a plurality of data levels, comprising:

one or more computer-readable storage medium and program instructions stored on at least one of the one or more tangible storage medium, the program instructions executable by a processor, the program instructions comprising;

program instructions to gather, by a network device, a plurality of data;

program instructions to encrypt, by a network device, a first section of data within the gathered plurality of data with a level 1 encryption key;

program instructions to encrypt, by a network device, a second section of data within the gathered plurality of data with a level 2 encryption key, wherein the first section of data is a progressively encrypted section of data with the level 1 encryption key and the level 2 encryption key associated with accessing the first section of data; and

program instructions to transmit, in a single transmission by a network device, a combined batch of data to a recipient device, wherein the combined batch of data includes the progressively encrypted first section of data, the encrypted second section of data, and an unencrypted section of data.

16. The computer program product of claim 15, further comprising:

program instructions to decrypt, by the recipient device, the second section of data with the level 2 encryption key; and

program instructions to decrypt, by the recipient device, the first section of data with the level 1 encryption key.

17. The computer program product of claim 15, wherein the encrypted first section of data is associated with encryption key 1, the encrypted second section of data is associated with encryption key 2, and wherein the level 1 encryption key is a progressive encryption key.

18. The computer program product of claim 15, wherein the network device has a hierarchical supervisory role over at least one other device, and wherein the network device has access to the encryption keys of at least one other device.

19. The computer program product of claim 15, wherein the encryption key is chosen based on the role of a device that is encrypting data, wherein the role is a functional role, and wherein the functional role is based on the type of data gathered by the network device.

20. The computer program product of claim 15, wherein an alternative encryption key is chosen based on a risk perceived by the network device sending data, and wherein the network device determines a level of risk.