Validation of clock to provide security for time locked data
AssigneeInternational Business Machines Corporation
InventorsMatthew G. Borlick, Lokesh M. Gupta
Life of this patent
Estimating the term…
Abstract
A computational device receives an input/output (I/O) operation directed to a data set. In response to determining that there is a time lock on the data set, a determination is made as to whether a clock of the computational device is providing a correct time. In response to determining that the clock of the computational device is not providing the correct time, the I/O operation is restricted from accessing the data set. In response to determining that the clock of the computational device is providing the correct time, a determination is made from one or more time entries of the time lock whether to provide the I/O operation with access to the data set.
Claims15
A method, comprising:
- recording in a log file, sequences and times of previous access and attempts to access a data set, and a passage of time in a computational device;
- determining a time provided by a clock of the computational device;
- determining a time via the log file, by examining a last entry of the log file;
- in response to determining that the time provided by the clock of the computational device and the time determined via the log file differ by more than a predetermined amount of time, determining that the clock of the computational device is not providing a correct time and restricting an input/output (I/O) operation from accessing the data set;
- and in response to determining that the time provided by the clock of the computational device and the time determined via the log file do not differ by more than the predetermined amount of time, determining that the clock of the computational device is providing the correct time and determining whether to provide the I/O operation with access to the data set.
A system, comprising:
- a memory;
- and
- a processor coupled to the memory, wherein the processor performs operations, the operations comprising:
- recording in a log file, sequences and times of previous access and attempts to access a data set, and a passage of time in a computational device;
- determining a time provided by a clock of the computational device;
- determining a time via the log file by examining a last entry of the log file;
- in response to determining that the time provided by the clock of the computational device and the time determined via the log file differ by more than a predetermined amount of time, determining that the clock of the computational device is not providing a correct time and restricting an input/output (PO) operation from accessing the data set;
- and
- in response to determining that the time provided by the clock of the computational device and the time determined via the log file do not differ by more than the predetermined amount of time, determining that the clock of the computational device is providing the correct time and determining whether to provide the I/O operation with access to the data set.
A computer program product, the computer program product comprising a computer readable storage medium having computer readable program code embodied therewith, the computer readable program code configured to perform operations on a processor of a computational device, the operations comprising:
- recording in a log file, sequences and times of previous access and attempts to access a data set, and a passage of time in the computational device;
- determining a time provided by a clock of the computational device;
- determining a time via the log file by examining a last entry of the log file;
- in response to determining that the time provided by the clock of the computational device and the time determined via the log file differ by more than a predetermined amount of time, determining that the clock of the computational device is not providing a correct time and restricting an input/output (I/O) operation from accessing the data set;
- and
- in response to determining that the time provided by the clock of the computational device and the time determined via the log file do not differ by more than the predetermined amount of time, determining that the clock of the computational device is providing the correct time and determining whether to provide the I/O operation with access to the data set.
Dependencies are inferred from the claim text.