US 8,621,649 B1 · Providing a security-sensitive environment

Abstract

A technique provides a security-sensitive environment. The technique involves establishing a first secure channel from a trusted server to a first data source DA. The technique further involves establishing a second secure channel from the trusted server to a second data source DB. The technique further involves, while the trusted server performs a set of collaborative operations in which the trusted server (i) accesses the first data source through the first secure channel (ii) accesses the second data source through the second secure channel, and (iii) generates a set of collaborative results based on information from the first and second data sources (i.e., the output of f(DA,DB)), running a set of security policy compliance operations in the trusted server to inhibit unauthorized leakage of data in the set of collaborative results.

Claims24

Dependent claims

A method of providing a security-sensitive environment, the method comprising:

establishing a first secure channel from a trusted server to a first data source through which the trusted server is able to access the first data source;
establishing a second secure channel from the trusted server to a second data source through which the trusted server is able to access the second data source;
and
while the trusted server performs a set of collaborative operations in which the trusted server (i) accesses the first data source through the first secure channel (ii) accesses the second data source through the second secure channel, and (iii) generates a set of collaborative results based on information from the first and second data sources, running a set of security policy compliance operations in the trusted server to inhibit unauthorized leakage of data in the set of collaborative results;
wherein running the set of security policy compliance operations in the trusted server includes:
partitioning the set of collaborative operations to un-correlate the set of collaborative results;
and
wherein partitioning the set of collaborative operations includes:
while the trusted server performs the set of collaborative operations as a series, resetting the trusted server to an initial state between each collaborative operation to prevent formation of correlated data across multiple collaborative operations.

6 more elements

A security-sensitive platform, comprising:

a network interface constructed and arranged to establish a first secure channel to a first data source, and establish a second secure channel to a second data source;
memory;
and
a controller coupled to the network interface and the memory, the controller being constructed and arranged to:
perform a set of collaborative operations by (i) accessing the first data source through the first secure channel (ii) accessing the second data source through the second secure channel, (iii) generating a set of collaborative results based on information from the first and second data sources, and (iv) storing the set of collaborative results in the memory, and
run a set of security policy compliance operations to inhibit unauthorized leakage of data in the set of collaborative results;
wherein the controller, when running the set of security policy compliance operations, is constructed and arranged to:
partition the set of collaborative operations to un-correlate the set of collaborative results;
and
wherein the controller, when partitioning the set of collaborative operations, is constructed and arranged to:
while the controller performs the set of collaborative operations as a series, reset to an initial state between each collaborative operation to prevent formation of correlated data across multiple collaborative operations.

8 more elements

A computer program product for providing a security-sensitive platform, the computer program product including a non-transitory computer readable storage medium storing a set of instructions which, when carried out by a computer, cause the computer to:

establish a first secure channel to a first data source and a second secure channel to a second data source;
after establishing the first and second secure channels, perform a set of collaborative operations by (i) accessing the first data source through the first secure channel (ii) accessing the second data source through the second secure channel, and (iii) generating a set of collaborative results based on information from the first and second data sources;
and
run a set of security policy compliance operations to inhibit unauthorized leakage of data in the set of collaborative results;
wherein the computer, when running the set of security policy compliance operations, is constructed and arranged to:
partition the set of collaborative operations to un-correlate the set of collaborative results;
and
wherein the computer, when partitioning the set of collaborative operations, is constructed and arranged to:
while performing the set of collaborative operations as a series, reset to an initial state between each collaborative operation to prevent formation of correlated data across multiple collaborative operations.

6 more elements

A method of providing a security-sensitive environment, the method comprising:

establishing a first secure channel from a trusted server to a first data source through which the trusted server is able to access the first data source;
establishing a second secure channel from the trusted server to a second data source through which the trusted server is able to access the second data source;
and
while the trusted server performs a set of collaborative operations in which the trusted server (i) accesses the first data source through the first secure channel (ii) accesses the second data source through the second secure channel, and (iii) generates a set of collaborative results based on information from the first and second data sources, running a set of security policy compliance operations in the trusted server to inhibit unauthorized leakage of data in the set of collaborative results;
wherein a set of predefined security policies defines the set of security policy compliance operations;
and wherein the method further comprises:
in response to running the set of security policy compliance operations in the trusted server to inhibit unauthorized leakage of data in the set of collaborative results, outputting a set of policy compliance results indicating whether each predefined security policy was satisfied;
wherein outputting the set of policy compliance results includes issuing an electronic certificate indicating whether each predefined security policy was satisfied;
and
wherein the method further comprises:
prior to performing the set of collaborative operations, transforming information from an original database to produce the first data source;
and
wherein running the set of security policy compliance operations in the trusted server includes:
performing a set of syntactic gating operations on the set of collaborative results, the set of syntactic gating operations being constructed and arranged to check for unauthorized explicit release of (i) first data from the first data source and (ii) second data from the second data source,
partitioning the set of collaborative operations to un-correlate the set of collaborative results, and
performing an empirical leakage measurement on the set of collaborative results generated by the trusted server to determine whether the set of collaborative results is heavily correlated to a particular database entry of a set of database entries of the first data source.

13 more elements

Dependencies are inferred from the claim text.

Providing a security-sensitive environment

Life of this patent

Providing a security-sensitive environment

Life of this patent

Abstract

Claims24