Method and system for securing data
View Patent ↗Disclosed is a method of supporting security policies and security levels associated with processes and applications. A security level is associated with a process independent of a user executing the process. When secure data is to be accessed, the security level of the process is evaluated to determine whether data access is to be granted. Optionally, the security level of a user of the process is also evaluated prior to providing data access.
1. A method comprising:
assigning a first privilege level to a first process, the first process in execution on a hardware processor of a computer system, the first privilege level other than related to a privilege level of a user of the first process or a group of the user;
assigning a second privilege level to a second process, the second process in execution on the processor of the computer system, the second privilege level other than related to a privilege level of a user of the second process or a group of the user, the second privilege level being more restricted than the first privilege level;
storing a first data file in a data store, the first data file encrypted, and wherein a privilege level greater than or equal to the first privilege level is required to obtain access to a plain text version of the first data file;
requesting access to the first data file by the first process and by the second process;
evaluating the first privilege level of the first process and evaluating the second privilege level of the second process by a third process, the third process in execution on the processor of the computer system and the third process for controlling access to file data by the first process and by the second process; and
in dependence upon the first privilege level of the first process and the second privilege level of the second process, providing by the third process:
access to a plain text version of the first data file stored in the data store to the first process; and
access to an encrypted version of the first data file stored in the data store to the second process,
wherein the first process is always provided the plain text version of the first file and the second process is always provided the encrypted version of the first data file in response to a file access request for the first file.
2. A method according to claim 1 comprising:
requesting access to the first data file by the first process for storing file data of the first data file;
evaluating the first privilege level of the first process by the second process; and
in dependence upon the first privilege level of the first process, the second process is operable to support one of storing a plain text version of the first data file within the data store and storing an encrypted version of the first data file within the data store, the second process operable to provide same support to the first process in response to a file access request for a same file.
3. A method according to claim 2 wherein a same one of providing a plain text operation or providing a cipher operation is provided for a same process for both storage and retrieval of a same first data file.
4. A method according to claim 1 wherein a same file stored in encrypted form is always by a same first process accessing said file in plain text form stored in encrypted form.
5. A method according to claim 1 wherein the data store is in data communication with the processor of the computer system via a communication network and wherein access to the first data file is provided via the communication network.
6. A method according to claim 1 comprising:
providing access to the first data file to the first process.
7. A method according to claim 6 wherein the access provided is selected from a plurality of types of access supported by the system.
8. A method according to claim 1 wherein the first data file comprises a system clipboard data file.
9. A method according to claim 1 wherein access to the first data file requires access to a decryption key associated with the first data file.
10. A method according to claim 9 wherein access to the decryption key is provided in dependence upon the first privilege level of the first process and the first data file.
11. A method according to claim 10 wherein once accessed the decryption key is cached by the first process for further use thereby.
12. The method according to claim 1 wherein the second process is the computer system's operating system (OS) process.
13. A method according to claim 12 wherein the second process is called in response to a hook into the OS APIs.
14. A method according to claim 1 wherein privilege levels comprise: Top secret, full trusted, semi-trusted, non-trusted, and banned.
15. A method according to claim 1 wherein the first data file is stored within a second system and comprises cipher data for accessing first secured data, the first secured data secured with a cipher comprising:
establishing trust between the computer system and the second system;
evaluating by the second system the first privilege level of the first process in execution within the computer system;
when the first privilege level is sufficient to provide access to the cipher data, providing access to at least some of the cipher data; and
when the first privilege level is insufficient to support access to the cipher data, other than providing access to the at least some of the cipher data.