Back to results
US 11,641,349 B2Granted
Encryption management
AssigneeInternational Business Machines Corporation
InventorsLokesh Mohan Gupta, Matthew G. Borlick, Mark Elliott Hack, Micah Robison
Life of this patent
Estimating the term…
Abstract
Aspects of the present disclosure relate to encryption management. A determination can be made whether an encryption algorithm is at-risk. In response to determining that the encryption algorithm is at-risk, data protected by the encryption algorithm can be identified. A security action can then be executed on the data protected by the encryption algorithm.
Claims21
A method comprising:
- determining whether an encryption algorithm is at-risk;
- identifying, in response to determining that the encryption algorithm is at-risk, data protected by the encryption algorithm, wherein data protected by the encryption algorithm is identified using a look-up table, wherein the look-up table maps respective time periods and data locations to respective encryption algorithms, wherein the encryption algorithm is mapped to a first time period and a first data location within the look-up table and wherein a second encryption algorithm is mapped to a second time period and a second data location within the look-up table;
- and
- executing a security action on the data protected by the encryption algorithm.
1 more element
A system comprising:
- one or more processors;
- and
- one or more computer-readable storage media collectively storing program instructions which, when executed by the one or more processors, are configured to cause the one or more processor to perform a method comprising:
- determining whether an encryption algorithm is at-risk;
- identifying, in response to determining that the encryption algorithm is at-risk, data protected by the encryption algorithm, wherein data protected by the encryption algorithm is identified using a look-up table, wherein the look-up table maps respective time periods and data locations to respective encryption algorithms, wherein the encryption algorithm is mapped to a first time period and a first data location within the look-up table and wherein a second encryption algorithm is mapped to a second time period and a second data location within the look-up table;
- and
- executing a security action on the data protected by the encryption algorithm.
4 more elements
A computer program product comprising one or more computer readable storage media, and program instructions collectively stored on the one or more computer readable storage media, the program instructions comprising instructions configured to cause one or more processors to perform a method comprising:
- determining whether an encryption algorithm is at-risk, wherein determining whether the encryption algorithm is at-risk further comprises:
- parsing text resources for the encryption algorithm;
- identifying a first string within the text resources associated with the encryption algorithm;
- and
- classifying risk of the encryption algorithm based on the identified first string;
- identifying, in response to determining that the encryption algorithm is at-risk, data protected by the encryption algorithm;
- and
- executing a security action on the data protected by the encryption algorithm.
5 more elements
A method comprising:
- storing an encryption tag with a data set, the encryption tag including an encryption algorithm indicator specifying an encryption algorithm used to encrypt the data set;
- determining that the encryption algorithm used to encrypt data set is at-risk;
- locating the data set using the encryption tag, wherein a look-up table maps respective time periods and data locations to respective encryption algorithms, wherein the encryption algorithm is mapped to a first time period and a first data location within the look-up table and wherein a second encryption algorithm is mapped to a second time period and a second data location within the look-up table;
- and
- executing a security action on the data set.
2 more elements
A system comprising:
- one or more processors;
- and
- one or more computer-readable storage media collectively storing program instructions which, when executed by the one or more processors, are configured to cause the one or more processor to perform a method comprising:
- storing an encryption tag with a data set, the encryption tag including an encryption algorithm indicator specifying an encryption algorithm used to encrypt the data set;
- determining that the encryption algorithm used to encrypt data set is at-risk, wherein determining that the encryption algorithm is at-risk further comprises:
- parsing text resources for the encryption algorithm;
- identifying a first string within the text resources associated with the encryption algorithm;
- and
- classifying risk of the encryption algorithm based on the identified first string;
- locating the data set using the encryption tag;
- and
- executing a security action on the data set.
9 more elements
Dependencies are inferred from the claim text.