Safe sharing of sensitive data
In an example, there is disclosed a computing apparatus having: a processor; a memory; a data interface; and one or more logic elements providing a verification engine to: receive via the data interface an input script including a request to access enterprise data; analyze the input script to determine that the input script complies with a data request criterion; apply an application programming interface (API) to the input script to collect the enterprise data; and send the enterprise data via the data interface.
1. An enterprise data server to provide regulated access of enterprise data to non-enterprise third parties, comprising:
a hardware platform comprising a processor and a memory;
a network interface;
an enterprise data store, or an interface to access the enterprise data store;
a reputation engine to receive a third-party script via the network interface and to assign a reputation to the third-party script, the third-party script including instructions to export data from the enterprise data store to a third-party contracted to receive data from the enterprise data store;
an ingress analyzer to scrutinize the third-party script according to the reputation and determine whether the third-party script may run; and
a data collector to collect enterprise data from the enterprise data store if the third-party script may run.
2. The enterprise data server of claim 1 , wherein the reputation is based at least in part on a source of the third-party script.
3. The enterprise data server of claim 1 , wherein the reputation is based at least in part on a signature provided with the third-party script.
4. The enterprise data server of claim 1 , wherein the reputation is a scalar representation.
5. The enterprise data server of claim 4 , wherein the scalar representation is a three-tier representation.
6. The enterprise data server of claim 1 , wherein the reputation is a multi-dimensional reputation.
7. The enterprise data server of claim 1 , wherein the ingress analyzer is to permit the third-party script if it has a trusted reputation.
8. The enterprise data server of claim 1 , wherein assigning the reputation to the third-party script comprises querying a global reputation store.
9. The enterprise data server of claim 1 , further comprising a rules engine to verify the third-party script against a set of permissible behavior rules.
10. The enterprise data server of claim 1 , wherein the ingress analyzer is to verify that the third-party script accesses only authorized data sources.
11. The enterprise data server of claim 1 , wherein the ingress analyzer is to verify that the third-party script includes only authorized data operations.
12. The enterprise data server of claim 1 , wherein the ingress analyzer is to mathematically prove that the third-party script includes not illicit operations.
13. One or more tangible, non-transitory computer-readable storage mediums having stored thereon executable instructions to:
receive an incoming third-party data request, the third-party data request including instructions to export data from an enterprise data store to a third-party contracted to receive data from the enterprise data store;
assign a reputation to the third-party data request;
scrutinize the third-party data request according to the reputation and determine whether to service the third-party data request; and
collect enterprise data from an enterprise data repository if the third-party data request is to be serviced.
14. The one or more tangible, non-transitory computer-readable mediums of claim 13 , wherein the incoming third-party data request is a script.
15. The one or more tangible, non-transitory computer-readable storage mediums of claim 13 , wherein the reputation is based at least in part on a source of the third-party data request.
16. The one or more tangible, non-transitory computer-readable storage mediums of claim 13 , wherein the reputation is based at least in part on a signature provided with the third-party data request.
17. The one or more tangible, non-transitory computer-readable storage mediums of claim 13 , wherein assigning the reputation to the third-party data request comprises querying a global reputation store.
18. The one or more tangible, non-transitory computer-readable storage mediums of claim 13 , wherein the executable instructions are to verify that the third-party data request is directed only authorized data sources.
19. A computer-implemented method of servicing third-party enterprise data requests, comprising:
receiving a third-party script, the third-party script including instructions to export data from an enterprise data store to a third-party contracted to receive data from the enterprise data store;
assigning a reputation to the third-party script;
analyzing the third-party script in view of the reputation to decide whether the third-party script is permissible; and
if the third-party script is permissible, executing the third-party script via a scripting API to collect enterprise data requested in the third-party script.
20. The method of claim 19 , further comprising verifying that the third-party script includes only authorized data operations.