Back to results
US 10,594,478 B2Granted
Authenticated copying of encryption keys between secure zones
AssigneeInternational Business Machines Corporation
InventorsJames R. Coon, Michael J. Miele, Garry J. Sullivan
Life of this patent
Estimating the term…
Abstract
The solutions disclosed enable security credentials to be shared between two entities. Embodiments of the present invention can be used to facilitate the transfer security credentials associated with a first level of permission of a first entity to a second entity that does not have the security credentials associated with the first level of permission in response to receiving a request to share security credentials between two entities.
Claims20
A method comprising:
- responsive to receiving a request to share security credentials between two entities, enrolling, by one or more processors, respective security credentials associated with a first and a second entity, wherein each security credential specifies different levels of permission for the first and the second entity;
- and
- transferring, by one or more processors, security credentials stored on a smart key card associated with the first entity having a first subset level of permission that allows the first entity access to a first zone to a smart key card of the second entity that does not have the security credentials associated with the first subset level of permission by creating a temporary file based on security credentials of the first entity and transferring the temporary file that includes the security credentials of the first entity, wherein
- the temporary file includes instructions to persist for a specified time period and purpose and instructions to maintain the security credentials of the second entity that are already stored on the smart key card of the second entity and maintaining the security credentials of the first entity on the smart key card of the first entity.
1 more element
A computer program product comprising:
- a computer readable storage medium and program instructions stored on the computer readable storage medium, the program instructions comprising:
- responsive to receiving a request to share security credentials between two entities, program instructions to enroll respective security credentials associated with a first and a second entity, wherein each security credential specifies different levels of permission for the first and the second entity;
- and
- program instructions to transfer security credentials stored on a smart key card associated with the first entity having a first subset level of permission that allows the first entity access to a first zone to a smart key card of the second entity that does not have the security credentials associated with the first subset level of permission by creating a temporary file based on security credentials of the first entity and transferring the temporary file that includes the security credentials of the first entity, wherein
- the temporary file includes instructions to persist for a specified time period and purpose and instructions to maintain the security credentials of the second entity that are already stored on the smart key card of the second entity and maintaining the security credentials of the first entity on the smart key card of the first entity.
2 more elements
A computer system, comprising:
- one or more computer processors;
- one or more computer readable storage media;
- program instructions stored on the one or more computer readable storage media for execution by at least one of the one or more processors, the program instructions comprising:
- responsive to receiving a request to share security credentials between two entities, program instructions to enroll respective security credentials associated with a first and a second entity, wherein each security credential specifies different levels of permission for the first and the second entity;
- and
- program instructions to transfer security credentials stored on a smart key card associated with the first entity having a first subset level of permission that allows the first entity access to a first zone to a smart key card of the second entity that does not have the security credentials associated with the first subset level of permission by creating a temporary file based on security credentials of the first entity and transferring the temporary file that includes the security credentials of the first entity, wherein
- the temporary file includes instructions to persist for a specified time period and purpose and instructions to maintain the security credentials of the second entity that are already stored on the smart key card of the second entity and maintaining the security credentials of the first entity on the smart key card of the first entity.
4 more elements
Dependencies are inferred from the claim text.