Back to results
US 2023/0142664 A1Published application
Entity-specific data-centric trust mediation
AssigneeGo Logic Decision Time, LLC
InventorsDennis Paul Ackerman, Stephen Francis Taylor
Life of this patent
Estimating the term…
Abstract
Establishing event-specific trust through data-centric mediation by: generating a mediated covenant of association as an instance of trust among a plurality of entities at an association layer of a multi-layer computer security system; constructing a security model enforceable by the multi-layer computer security system that expresses node-node semantic relationships as links among nodes of the model representing protectable computing resources; and producing an event-specific security model via informatic convolution of elements of the covenant with elements of the security model, so that the event-specific security model is operable to constrain a computing action among computing resources represented by the plurality of entities.
Claims41
A method of establishing event-specific trust in a multi-layer computer security system, the method comprising:
- generating a mediated covenant of association among a plurality of entities of a plurality of different types of entities including at least one user-type entity, at least one process-type entity representing one or more computing system processes, and at least one data-type entity, the covenant comprising properties representing semantically interconnected topical capabilities sourced from ancillary data associated with one or more entity of the plurality of entities, wherein the covenant expresses an instance of trust among the plurality of entities at an association layer of the multi-layer computer security system;
- constructing a security model enforceable by the multi-layer computer security system so that at least a subset thereof is associated with one or more nodes representing encoded aspects of resources protected by the computer security system, wherein links between nodes in the security model represent semantic relationships based on a security ontology associated with the multi-layer computer security system;
- and
- producing a computer security event-specific model, which reflects impacts of at least one of the properties of the covenant at one or more of the nodes, via informatic convolution of the security model with the semantically interconnected topical capabilities of the covenant, wherein the at least one of the properties of the covenant takes on an event-specific meaning in the event-specific model based on the security ontology, and wherein the event-specific model is operable at an event-layer in the multi-layer computer security system by constraining a computing system action of the one or more computing system processes associated with the process-type entity that acts upon data structures of the data-type entity, the constraining based at least on part on the instance of trust expressed at the association layer.
1 more element
A method of securing a computing system, the method comprising:
- generating a trusted set of semantically interconnected topical capabilities sourced from ancillary data associated with one or more of a plurality of entities;
- configuring the set of semantically interconnected topical capabilities into a covenant of trust among the plurality of entities;
- constructing a security model enforceable by the computing system so that at least a subset thereof is associated with one or more nodes representing encoded aspects of resources associated with the computing system, wherein links between nodes in the security model represent semantic relationships based on a first ontology;
- and
- producing a computing event-specific model, which reflects impacts of at least one capability of the trusted set of semantically interconnected topical capabilities at one or more of the nodes, via informatic convolution of the security model with the trusted set of semantically interconnected topical capabilities, wherein the at least one capability of the trusted set of semantically interconnected topical capabilities takes on an event-specific meaning in the computing event-specific model based on the first ontology, and wherein the computing event-specific model is operable in securing the computing system by constraining a computing system action of a process-type entity of the plurality of entities.
2 more elements
A multi-layer computer security system comprising:
- a recombinant access mediation system generating a mediated covenant of association among at least one user-type entity, at least one process-type entity representing one or more computing system processes, and at least one data-type entity, the covenant comprising properties representing semantically interconnected topical capabilities sourced from ancillary data associated with one or more of the at least one user-type entity, the at least one process-type entity, and the at least one data-type entity, wherein the covenant expresses an instance of trust among each of the at least one user-type entity, the at least one process-type entity, and the at least one data-type entity at an association layer of the multi-layer computer security system;
- a processor-accessible security model constructed so that at least a subset thereof is associated with one or more nodes representing encoded aspects of computing resources, wherein links between nodes in the security model represent semantic relationships based on an ontology associated with the multi-layer computer security system;
- a topical capabilities mediation system producing an event-specific model via informatic convolution of the security model with the semantically interconnected topical capabilities of the covenant, wherein the informatic convolution causes at least one of the properties of the covenant to take on an event-specific meaning in the event-specific model based on the ontology and the event-specific model reflects impacts of at least one of the properties of the covenant at one or more of the nodes;
- and
- an event-layer in the multi-layer computing security system providing processor access to the event-specific model to constrain through application of the event-specific model an action of the one or more computing system processes of the process-type entity that acts upon data structures of the data-type entity, the constraining based at least in part on the instance of trust expressed at the association layer.
2 more elements
Dependencies are inferred from the claim text.