Multi-layer data security
AssigneeSap SE
InventorsMarek Piotr Zielinski, Jan Harm Petrus Eloff
Life of this patent
Estimating the term…
Abstract
Data may be encrypted using a public key. From a plurality of functions executable on the data, one or more functions may be selected. The selected one or more functions may be associated with the encrypted data. The selected one or more functions may provide exclusive access to the data. A data structure specifying conditions for access to the one or more functions may be created. An exclusive interface to provide access to the one or more functions may be created. The interface, upon determining that one or more conditions from the conditions are satisfied, may grant access to the one or more functions. The encrypted data, the associated one or more functions, the data structure, and the interface may be included into an object.
Claims22
A computer-implemented method comprising:
- encrypting, by a computer processor, data using a key;
- from a plurality of functions executable on the data, selecting at least one function;
- associating the selected at least one function with the encrypted data, wherein the selected at least one function provides exclusive access to the data;
- creating a data structure specifying conditions for access to the at least one function with the encrypted data;
- creating an exclusive interface to provide access to the at least one function, wherein the interface, upon determining that at least one condition from the conditions is satisfied, grants access to the at least one function;
- and
- including the encrypted data, the associated at least one function, the data structure, and the interface into an object.
An apparatus comprising:
- a processor to:
- encrypt data using a key;
- from a plurality of functions executable on the data, select at least one function;
- associate the selected at least one function with the encrypted data, wherein the selected at least one function provides exclusive access to the data;
- create a data structure specifying conditions for access to the at least one function;
- create an exclusive interface to provide access to the at least one function, wherein the interface, upon determining that at least one condition from the conditions is satisfied, grants access to the at least one function;
- and
- include the encrypted data, the associated at least one function, the data structure, and the interface into an object.
A non-transitory computer-readable medium embodied with computer-executable instructions for causing a computer to execute instructions, the computer instructions comprising:
- encrypting, by a computer processor, data using a key;
- from a plurality of functions executable on the data, selecting at least one function;
- associating the selected at least one function with the encrypted data, wherein the selected at least one function provides exclusive access to the data;
- creating a data structure specifying conditions for access to the at least one function;
- creating an exclusive interface to provide access to the at least one function, wherein the interface, upon determining that at least one condition from the conditions is satisfied, grants access to the at least one function;
- and
- including the encrypted data, the associated at least one function, the data structure, and the interface into an object.
A computer-implemented method comprising:
- encrypting, by a computer processor, data using a key;
- from a plurality of functions executable on the data, selecting at least one function;
- associating the selected at least one function with the encrypted data, wherein the selected at least one function provides exclusive access to the data;
- creating a data structure specifying conditions for access to the at least one function;
- creating an exclusive interface to provide access to the at least one function, wherein the interface, upon determining that all the conditions are satisfied, grants access to the at least one function;
- and
- including the encrypted data, the associated at least one function, the data structure, software necessary to execute the at least one function, and the interface into an object.
Dependencies are inferred from the claim text.