IP Library Granted Patent US 10,389,719
Granted Patent B2
US 10,389,719 · App. 15/337,181 · Granted Aug 20, 2019

Parameter based data access on a security information sharing platform

Inventors: Terence Spies (Cupertino, CA); Tomas Sander (Princeton, NJ); Susan K. Langford (Sunnyvale, CA)
Assignee: ENTIT SOFTWARE LLC
H04L63/10H04L9/0643H04L63/0428H04L63/065H04L63/083H04L63/102H04L9/3236H04L63/061H04L63/068H04L63/104H04L67/1097
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,389,719
App. No.
15/337,181
Filed
Oct 28, 2016
Granted
Aug 20, 2019
Kind
B2
Art Unit
2498
USPC
713/170
Abstract

Example implementations relate to a security information sharing platform that enables sharing of security information among a plurality of members. For example, in an implementation, a system may determine that a first member of a community of a security information sharing platform is entitled access to a first set of encrypted information shared by a second member of the community. The system may also receive a request, from the first member, to access the first set of encrypted information, the request including a masked parameter. The system may also determine that the masked parameter matches an access parameter for accessing the first set of encrypted information and provide the first member access to the first set of encrypted information in response to determining that the masked parameter matches the access parameter.

Claims (38)

1. A system for parameter based data access on a security information sharing platform that enables sharing of security information among a plurality of members, the system comprising:

a processor; and

a non-transitory storage medium storing instructions executable on the processor to:

make a first set of encrypted information available to a first member of a community of the security information sharing platform, wherein the first set of encrypted information is shared by a second member of the community;

receive a request, from the first member, to access the first set of encrypted information, the request including a masked parameter that defines a group of members, wherein the masked parameter comprises a data password formed using a first parameter and a message authentication code of a member name and a member attribute;

recompute the first parameter from the data password;

determine that the first parameter matches an access parameter for accessing the first set of encrypted information; and

provide the first member access to the first set of encrypted information in response to determining that the first parameter matches the access parameter.

2. The system of claim 1 , wherein the instructions are executable on the processor to:

determine that the first member is associated with the access parameter for accessing the first set of encrypted information.

3. The system of claim 1 , wherein the instructions are executable on the processor to:

access a parameter database to determine a set of parameters associated with the first member.

4. The system of claim 1 , wherein the masked parameter defines the group of members within the community of the security information sharing platform that the first member belongs to.

5. The system of claim 1 , wherein the masked parameter is used to define the community rather than enumerating individual members of the community.

6. The system of claim 5 , wherein the masked parameter and another parameter that defines another group of members collectively define the community.

7. The system of claim 5 , wherein the community is based on a plurality of groups of members including the group of members defined by the masked parameter.

8. The system of claim 1 , wherein the member name is a name of the first member.

9. The system of claim 1 , wherein the member attribute provides an indication of members of the community.

10. A system for parameter based data access on a security information sharing platform that enables sharing of security information among a plurality of members, the system comprising:

a processor; and

a non-transitory storage medium storing instructions executable on the processor to:

make a first set of encrypted information available to a first member of a community of the security information sharing platform, wherein the first set of encrypted information is shared by a second member of the community;

receive a request, from the first member, to access the first set of encrypted information, the request including a masked parameter that defines a group of members, wherein the masked parameter is a masked first parameter encrypted using a parameter masking key;

decrypt the masked parameter using the parameter masking key to produce a decrypted first parameter;

determine that the decrypted first parameter matches an access parameter for accessing the first set of encrypted information; and

provide the first member access to the first set of encrypted information in response to determining that the decrypted first parameter matches the access parameter.

11. The system of claim 10 , wherein the instructions are executable on the processor to provide the first member access to the first set of encrypted information by transmitting, to the first member, a data key component used to access the first set of encrypted information.

12. The system of claim 11 , wherein the data key component is useable to decrypt the first set of encrypted information.

13. The system of claim 11 , wherein the data key component is combined with a time-based data key component to form a data key that is useable to decrypt the first set of encrypted information.

14. A non-transitory machine-readable storage medium encoded with instructions for parameter based data access on a security information sharing platform that enables sharing of security information among a plurality of members, the instructions upon execution causing a system to:

make a first set of encrypted information available to a first member of a community of the security information sharing platform, wherein the first set of encrypted information is shared by a second member of the community and is accessible by members of the community using a first parameter;

receive a request, from the first member, to access the first set of encrypted information, the request including a data password formed using a second parameter and a message authentication code of a member name and a member attribute;

recompute the second parameter from the data password;

determine that the second parameter matches the first parameter; and

provide access to the first set of encrypted information to the first member in response to a determination that the second parameter matches the first parameter.

15. The non-transitory machine-readable storage medium of claim 14 , wherein the second parameter is used to define the community rather than enumerating individual members of the community.

16. The non-transitory machine-readable storage medium of claim 14 , wherein the member name is a name of the first member.

17. The non-transitory machine-readable storage medium of claim 14 , wherein the member attribute provides an indication of members of the community.

Assignments (7)
RELEASE OF SECURITY INTEREST REEL/FRAME 044183/0718 Recorded Feb 2, 2023
From: JPMORGAN CHASE BANK, N.A.
To: MICRO FOCUS LLC (F/K/A ENTIT SOFTWARE LLC); BORLAND SOFTWARE CORPORATION; MICRO FOCUS (US), INC.; SERENA SOFTWARE, INC; ATTACHMATE CORPORATION; MICRO FOCUS SOFTWARE INC. (F/K/A NOVELL, INC.); NETIQ CORPORATION
Reel/Frame 062746/0399 →
RELEASE OF SECURITY INTEREST REEL/FRAME 044183/0577 Recorded Feb 2, 2023
From: JPMORGAN CHASE BANK, N.A.
To: MICRO FOCUS LLC (F/K/A ENTIT SOFTWARE LLC)
Reel/Frame 063560/0001 →
CHANGE OF NAME Recorded Aug 8, 2019
From: ENTIT SOFTWARE LLC
To: MICRO FOCUS LLC
Reel/Frame 050004/0001 →
SECURITY INTEREST Recorded Oct 11, 2017
From: ATTACHMATE CORPORATION; BORLAND SOFTWARE CORPORATION; NETIQ CORPORATION; MICRO FOCUS (US), INC.; MICRO FOCUS SOFTWARE, INC.; ENTIT SOFTWARE LLC; ARCSIGHT, LLC; SERENA SOFTWARE, INC.
To: JPMORGAN CHASE BANK, N.A.
Reel/Frame 044183/0718 →
SECURITY INTEREST Recorded Oct 11, 2017
From: ENTIT SOFTWARE LLC; ARCSIGHT, LLC
To: JPMORGAN CHASE BANK, N.A.
Reel/Frame 044183/0577 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 9, 2017
From: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP
To: ENTIT SOFTWARE LLC
Reel/Frame 042746/0130 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 22, 2017
From: SPIES, TERENCE; SANDER, TOMAS; LANGFORD, SUSAN K.
To: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP
Reel/Frame 041937/0178 →
Continuity (1)
Related Publication 20180124054A1 · May 3, 2018