Accessing a data item in a memory of a computer system
OwnerGordon Hutchison, David Screeninventors
Life of this patent
Estimating the term…
Abstract
A method for protecting sensitive data items which must be accessed data item in a memory of a computer system. A data hiding policy is defined. The policy includes one or more policy entries, each policy entry corresponding to an attribute of a data item and each policy entry indicating whether a data item having said attribute is to be hidden. When each data item is retrieved from the memory of the computer system, a determination is made whether a policy entry includes an indication that the retrieved data item is to be protected from exposure. If the data item is to be protected, an obscured representation of the data item is generated for external presentation. Obscuration may be accomplished by obfuscation, encryption, or encryption.
Claims13
A computer-implemented method for accessing a data item in a memory of a computer system, the method comprising the steps of:
- defining a data hiding policy including one or more policy entries, each policy entry corresponding to an attribute of a data item and each policy entry indicating whether a data item having said attribute is to be hidden;
- retrieving the data item from the memory of the computer system;
- responsive to a determination that a policy entry includes an indication that the accessed data item is to be hidden, generating an obscured data item representing the accessed data item.
A memory access proxy for accessing a data item in a memory of a computer system, the proxy comprising:
- means for defining a data hiding policy including one or more policy entries, each policy entry corresponding to an attribute of a data item and each policy entry indicating whether a data item having said attribute is to be hidden;
- means for retrieving the data item from the memory of the computer system;
- and
- means responsive to a determination that a policy entry includes an indication that the accessed data item is to be hidden for generating an obscured data item representing the accessed data item.
A computer program product comprising computer program code stored on a computer readable storage medium which, when executed on a data processing system, causes the system to:
- define a data hiding policy including one or more policy entries, each policy entry corresponding to an attribute of a data item and each policy entry indicating whether a data item having said attribute is to be hidden;
- retrieve the data item from the memory of the computer system;
- responsive to a determination that a policy entry includes an indication that the accessed data item is to be hidden, generate an obscured data item representing the accessed data item.
Dependencies are inferred from the claim text.