Automatic sharing of whitelist data
Whitelists are automatically shared between users and/or domains without compromising user/domain privacy. Potential trust partners with whom to share whitelist data are automatically identified. A handshaking procedure is carried out to confirm the trust relationship and verify the partner's identity. Once a trust partner is confirmed, the parties can exchange acceptance criteria specifying the types of whitelist data they want to receive. Each party can provide the other with the appropriate entries from its own whitelist. The parties keep each other updated, as their own whitelists change.
1. A computer implemented method for sharing whitelist information, the method comprising the steps of:
automatically identifying, by a computer, at least one potential trust partner with whom to share whitelist data;
executing, by a computer, a handshaking procedure with the at least one identified potential trust partner, in order to confirm a trust relationship;
responsive to confirming a trust relationship with at least one trust partner, transmitting, by a computer, criteria to the at least one confirmed trust partner, said criteria indicating what whitelist data the confirmed trust partner is to share;
receiving, by a computer, whitelist data from the at least one confirmed trust partner, responsive to the transmitted criteria;
adding, by a computer, the received whitelist data to a local whitelist;
receiving, by a computer, updates to the received whitelist data from the at least one confirmed trust partner according to an update schedule;
updating, by a computer, the local whitelist based on the received updates; and
responsive to not receiving a specified number of scheduled updates from a confirmed trust partner, dropping, by a computer, the trust relationship with that trust partner.
2. The method of claim 1 wherein executing a handshaking procedure with an identified potential trust partner further comprises:
transmitting a notification to the potential trust partner;
receiving a response from the potential trust partner; and
verifying identity of the potential trust partner.
3. The method of claim 1 further comprising:
receiving criteria from a confirmed trust partner, said criteria indicating what whitelist data to share with that confirmed trust partner; and
transmitting whitelist data to that confirmed trust partner, responsive to the received transmitted criteria.
4. The method of claim 1 further comprising:
transmitting whitelist data updates to at least one confirmed trust partner according to an update schedule.
5. The method of claim 1 further comprising:
responsive to receiving a drop notification from a trust partner, dropping the trust relationship with that trust partner.
6. At least one non-transitory computer readable medium storing a computer program product for sharing whitelist information, the computer program product comprising:
program code for automatically identifying at least one potential trust partner with whom to share whitelist data;
program code for executing a handshaking procedure with the at least one identified potential trust partner, in order to confirm a trust relationship;
program code for, responsive to confirming a trust relationship with at least one trust partner, transmitting criteria to the at least one confirmed trust partner, said criteria indicating what whitelist data the confirmed trust partner is to share;
program code for receiving whitelist data from the at least one confirmed trust partner, responsive to the transmitted criteria;
program code for adding the received whitelist data to a local whitelist;
program code for receiving updates to the received whitelist data from the at least one confirmed trust partner according to an update schedule;
program code for updating the local whitelist based on the received updates; and
program code for, responsive to not receiving a specified number of scheduled updates from a confirmed trust partner, dropping the trust relationship with that trust partner.
7. The computer readable medium storing the computer program product of claim 6 wherein the program code for executing a handshaking procedure with an identified potential trust partner further comprises:
program code for transmitting a notification to the potential trust partner;
program code for receiving a response from the potential trust partner; and
program code for verifying identity of the potential trust partner.
8. The computer readable medium storing the computer program product of claim 6 further comprising:
program code for receiving criteria from a confirmed trust partner, said criteria indicating what whitelist data to share with that confirmed trust partner; and
program code for transmitting whitelist data to that confirmed trust partner, responsive to the received transmitted criteria.
9. The computer readable medium storing the computer program product of claim 6 further comprising:
program code for transmitting whitelist data updates to at least one confirmed trust partner according to an update schedule.
10. The computer readable medium storing the computer program product of claim 6 further comprising:
program code for, responsive to receiving a drop notification from a trust partner, dropping the trust relationship with that trust partner.
11. A computer system for sharing whitelist information, the computer system comprising:
hardware implemented means for automatically identifying at least one potential trust partner with whom to share whitelist data;
hardware implemented means for executing a handshaking procedure with the at least one identified potential trust partner, in order to confirm a trust relationship;
hardware implemented means for, responsive to confirming a trust relationship with at least one trust partner, transmitting criteria to the at least one confirmed trust partner, said criteria indicating what whitelist data the confirmed trust partner is to share;
hardware implemented means for receiving whitelist data from the at least one confirmed trust partner, responsive to the transmitted criteria;
hardware implemented means for adding the received whitelist data to a local whitelist;
hardware implemented means for receiving updates to the received whitelist data from the at least one confirmed trust partner according to an update schedule;
hardware implemented means for updating the local whitelist based on the received updates; and
hardware implemented means for, responsive to not receiving a specified number of scheduled updates from a confirmed trust partner, dropping the trust relationship with that trust partner.
12. The computer system of claim 11 wherein the means for executing a handshaking procedure with an identified potential trust partner further comprise:
hardware implemented means for transmitting a notification to the potential trust partner;
hardware implemented means for receiving a response from the potential trust partner; and
hardware implemented means for verifying identity of the potential trust partner.
13. The computer system of claim 11 further comprising:
hardware implemented means for receiving criteria from a confirmed trust partner, said criteria indicating what whitelist data to share with that confirmed trust partner; and
hardware implemented means for transmitting whitelist data to that confirmed trust partner, responsive to the received transmitted criteria.
14. The computer system of claim 11 further comprising:
hardware implemented means for transmitting whitelist data updates to at least one confirmed trust partner according to an update schedule.