Shared security utility appliance for secure application and data processing
AssigneeInternational Business Machines Corporation
InventorsRonald L. Billau, Vincenzo V. Di Luoffo
Life of this patent
Estimating the term…
Abstract
A security information technology element (ITE) is disclosed for secure application and data processing, the security ITE including a physical enclosure defining a protection envelope and a secure computing device disposed within the protection envelope. The security ITE provides security services to applications and a secure processing environment for hosting applications, and includes cryptographic services and hardware acceleration. A security manager within the security ITE is configured to erase data within the protection envelope upon detecting physical tampering.
Claims20
A computer-readable device containing a program which, when executed using one or more computer processors, performs operations comprising:
- registering a first application with a security information technology element (ITE), the security ITE comprising a secure computing device located within a protection envelope and configured to provide security services for one or more applications;
- creating an application profile corresponding to the registered application and specifying an industry type of the registered application, the industry type associated with one or more security requirements for the registered application;
- receiving, over a secure communications link, a request from the registered application specifying a first data item;
- determining, based on the industry type, one or more security operations to perform on the first data item, wherein the one or more security operations are adapted to satisfy the one or more security requirements for the registered application;
- performing the one or more security operations on the first data item in accordance with the application profile, thereby producing a modified first data item;
- and
- returning, over the secure communications link, the modified first data item to the registered application.
A system, comprising:
- a computing device comprising a processor and configured to execute at least a first application;
- a security information technology element (ITE) comprising a secure computing device located within a protection envelope and configured to provide security services for one or more applications, wherein the security ITE is configured to perform operations comprising:
- registering the first application;
- creating an application profile corresponding to the registered application and specifying an industry type of the registered application, the industry type associated with one or more security requirements for the registered application;
- receiving, over a secure communications link, a request from the registered application specifying a first data item;
- determining, based on the industry type, one or more security operations to perform on the first data item, wherein the one or more security operations are adapted to satisfy the one or more security requirements for the registered application;
- performing the one or more security operations on the first data item in accordance with the application profile, thereby producing a modified first data item;
- and
- returning, over the secure communications link, the modified first data item to the registered application.
Dependencies are inferred from the claim text.