Back to results
US 2024/0403459 A1Published application
Enterprise data container
AssigneeMicrosoft Technology Licensing, LLC
InventorsPeter J. Marino, Michael Adam Taft, Brian M. Mahaffey
Life of this patent
Estimating the term…
Abstract
Examples of the present disclosure describe systems and methods for an enterprise data container (EDC) that facilitates the secure transfer of data between data boundaries of one or more computing environments. In examples, the EDC serves as a message wrapper for transmitted data. The EDC includes metadata, identification, tracking, security attributes, authenticity, and handling caveats relevant to the operational constraints of one or more computing environments through which data is transferred. The EDC is computing environment agnostic and agnostically manages the data wrapped in the EDC.
Claims20
A system comprising:
- a processing system;
- and
- memory comprising computer executable instructions that, when executed, perform operations comprising:
- applying an enterprise data container (EDC) to a data item in a first computing environment, wherein applying the EDC comprises:
- inserting a global identifier into the EDC, the global identifier being generated by the EDC and being applicable beyond a context of an originating service used to create the data item;
- inserting data content of the data item into the EDC;
- inserting handling information into the EDC, the handling information indicating a first policy for processing the data item in the first computing environment and a second policy for processing the data item in a second computing environment that is separated from the first computing environment by a data boundary;
- inserting an attribute of the data item into the EDC, the attribute being associated with metadata of the data item;
- and
- inserting a digital signature into the EDC, the digital signature being used to validate integrity of the data item;
- and
- transmitting the EDC to the second computing environment to be processed by the second computing environment in accordance with the second policy.
9 more elements
A method comprising:
- applying an enterprise data container (EDC) to a data item in a first computing environment, wherein applying the EDC comprises:
- inserting a global identifier into the EDC, the global identifier being generated by the EDC;
- inserting content of the data item into the EDC;
- inserting handling information into the EDC, the handling information indicating a first policy for transmitting or accessing the data item in the first computing environment and a second policy for transmitting or accessing the data item in a second computing environment;
- and
- inserting a cryptographically signed data into the EDC, the cryptographically signed data associated with an owner or a possessor of the data item;
- processing the EDC in the first computing environment in accordance with the first policy;
- and
- transmitting the EDC to the second computing environment to be processed by the second computing environment in accordance with the second policy.
6 more elements
A device comprising:
- a processing system;
- and
- memory comprising computer executable instructions that, when executed, perform operations comprising:
- inserting a global identifier into an enterprise data container (EDC) applied to a data item, the global identifier being generated for the data item by the EDC;
- inserting content of the data item or a representation of the content into the EDC;
- inserting handling information into the EDC, the handling information including:
- a first policy associated with a first computing environment, the first policy providing first access controls and handling controls for interacting with the data item in the first computing environment;
- and
- a second policy associated with a second computing environment, the second policy providing access second controls and handling controls for interacting with the data item in the second computing environment;
- and
- transmitting, in accordance with first policy, the EDC from the first computing environment to the second computing environment to be processed by the second computing environment in accordance with the second policy.
8 more elements
Dependencies are inferred from the claim text.