Encryption of community-based security information
AssigneeMicro Focus LLC
InventorsTerence Spies, Tomas Sander, Susan K. Langford
Life of this patent
Estimating the term…
Abstract
Examples disclosed herein relate to encryption of community-based security information. Some examples may enable authorizing a user of a community to access an encrypted data item (e.g., at least an encrypted portion of community-based security information of that community) using a decryption key. The community may be generated on a security information sharing platform based on a set of community attributes. The decryption key may comprise a private key corresponding to each user attribute of a set of user attributes that are associated with the authorized user where the set of user attributes satisfy the set of community attributes.
Claims20
A method comprising:
- identifying a first set of community attributes to be used to generate a first community on a security information sharing platform that enables sharing of security information among a plurality of communities;
- obtaining a first security indicator from a first user of the first community, the first user associated with a first set of user attributes that satisfy the first set of community attributes, wherein each user attribute in the first set of user attributes corresponds to a private key;
- obtaining first information related to the first security indicator from a second user of the first community;
- including the first security indicator and the first information in community-based security information of the first community;
- encrypting at least a portion of the community-based security information with a first encryption key to provide an encrypted portion;
- generating a first decryption key using the private key corresponding to each user attribute in the first set of user attributes;
- and
- authorizing a third user to access the encrypted portion of the community-based security information using the first decryption key, the third user associated with the first set of user attributes.
A non-transitory machine-readable storage medium storing instructions that, when executed by a processor of a computing device, cause the processor to:
- obtain a data item that is originated from a source entity;
- identify a security requirement that defines at least one user that is authorized to access the data item, the security requirement comprising a set of user attributes that describe a plurality of users to be authorized to access the data item;
- determine an encryption mechanism to be used to encrypt the data item based on the security requirement to provide an encrypted data item;
- generate a first community on a security information sharing platform that enables sharing of security information among a plurality of communities, wherein the community comprises the plurality of users;
- and
- authorize the plurality of users to access the encrypted data item using a decryption key that comprises a private key corresponding to each user attribute of the set of user attributes.
A system comprising:
- a processor that:
- identifies a set of community attributes to be used to generate a community on a security information sharing platform that enables sharing of security information among a plurality of communities;
- obtains a security indicator from a first user of the community, the first user associated with a first set of user attributes that satisfy the set of community attributes, wherein each user attribute in the first set of user attributes corresponds to a private key;
- obtains first information related to the security indicator from a second user of the community;
- includes the security indicator and the first information in community-based security information of the community;
- encrypts at least a portion of the community-based security information to provide an encrypted portion;
- and
- prevents a third user from accessing the encrypted portion of the community-based security information of the community, wherein the third user is associated with a second set of user attributes that do not satisfy the set of community attributes.
Dependencies are inferred from the claim text.