Granted Patent B2

US 12,261,828 · App. 18/063,095 · Granted Mar 25, 2025

Inventors: Sudheesh S. Kairali (Kozhikode, IN); Sarbajit K. Rakshit (Kolkata, IN)

Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATION

H04L63/0414G06F21/1064

Abstract

Claims (47)

1. A method for protecting data from a user when traversing a chain of microservices, the method comprising:

retrieving information identifying the chain of microservices associated with a user identifier of the user and a predicted time when the user will provide data to the chain of microservices;

retrieving a level of confidentiality stored in association with the user identifier of the user and the predicted time; and

implementing one or more security measures corresponding to the stored level of confidentiality for each microservice of the chain of microservices during the predicted time.

2. The method of claim 1 , further comprising:

implementing an alternative security measure for each microservice of the chain of microservices after the time.

3. The method of claim 2 , wherein the alternative security measure corresponds to a lower level of confidentiality than the level of confidentiality.

4. The method of claim 1 , further comprising:

implementing an alternative security measure for each microservice of the chain of microservices after the time in response to at least a threshold time passing from receipt of data having the level of confidentiality from the user.

5. The method of claim 1 , wherein retrieving information identifying the chain of microservices associated with the user identifier of the user and the time when the user provided data to the chain of microservices comprises:

monitoring interactions by the user during a training interval;

storing one or more times when data was received from the user during the training interval in association with the user identifier;

identifying one or more chains of microservices retrieved for the user in response to data received from the user;

storing an identified chain of microservices retrieved for corresponding data received from the user in association with a time when the data was received and the user identifier; and

retrieving the identified chain of microservices and the time when data was received based on the user identifier.

6. The method of claim 1 , wherein retrieving the level of confidentiality in association with the user identifier of the user and the time comprises:

determining a level of confidentiality for data received from the user during a training interval;

storing a time when data was received and a level of confidentiality determined for the data in association with a user identifier; and

retrieving the identified level of confidentiality associated with the user identifier and the time when data was received based on the user identifier.

7. The method of claim 1 , wherein implementing one or more security measures corresponding to the stored level of confidentiality for each microservice of the chain of microservices during the time comprises:

configuring the one or more security measures at an initialization time that is a threshold amount of time before the time.

8. The method of claim 7 , wherein the threshold amount of time is based on at least one of the one or more security measures.

9. The method of claim 1 , wherein implementing one or more security measures corresponding to the stored level of confidentiality for each microservice of the chain of microservices during the time comprises:

generating a replica of the chain of microservices; and

implementing the one or more security measures corresponding to the stored level of confidentiality for each microservice of the replica of the chain of microservices during the time.

10. An apparatus for protecting data from a user when traversing a chain of microservices, the apparatus comprising a computer processor, a computer memory operatively coupled to the computer processor, the computer memory having disposed within it computer program instructions that, when executed by the computer processor, cause the apparatus to carry out steps of:

retrieving information identifying the chain of microservices associated with a user identifier of the user and a predicted time when the user will provide data to the chain of microservices;

retrieving a level of confidentiality stored in association with the user identifier of the user and the predicted time; and

implementing one or more security measures corresponding to the stored level of confidentiality for each microservice of the chain of microservices during the predicted time.

11. The apparatus of claim 10 , wherein the steps further comprise:

implementing an alternative security measure for each microservice of the chain of microservices after the time.

12. The apparatus of claim 11 , wherein the alternative security measure corresponds to a lower level of confidentiality than the level of confidentiality.

13. The apparatus of claim 10 , wherein implementing one or more security measures corresponding to the stored level of confidentiality for each microservice of the chain of microservices during the time comprises:

configuring the one or more security measures at an initialization time that is a threshold amount of time before the time.

14. The apparatus of claim 13 , wherein the threshold amount of time is based on at least one of the one or more security measures.

15. A computer program product for protecting data from a user when traversing a chain of microservices, the computer program product disposed upon a computer readable medium, the computer program product comprising computer program instructions that, when executed, cause a computer to carry out steps of:

retrieving information identifying the chain of microservices associated with a user identifier of the user and a predicted time when the user will provide data to the chain of microservices;

retrieving a level of confidentiality stored in association with the user identifier of the user and the predicted time; and

implementing one or more security measures corresponding to the stored level of confidentiality for each microservice of the chain of microservices during the predicted time.

16. The computer program product of claim 15 , wherein the computer readable medium further comprises computer program instructions that, when executed, cause the computer to carry out steps of:

implementing an alternative security measure for each microservice of the chain of microservices after the time.

17. The computer program product of claim 16 , wherein the alternative security measure corresponds to a lower level of confidentiality than the level of confidentiality.

18. The computer program product of claim 15 , wherein the computer readable medium further comprises computer program instructions that, when executed, cause the computer to carry out steps of:

implementing an alternative security measure for each microservice of the chain of microservices after the time in response to at least a threshold time passing from receipt of data having the level of confidentiality from the user.

19. The computer program product of claim 15 , wherein implementing one or more security measures corresponding to the stored level of confidentiality for each microservice of the chain of microservices during the time comprises:

configuring the one or more security measures at an initialization time that is a threshold amount of time before the time.

20. The computer program product of claim 19 , wherein the threshold amount of time is based on at least one of the one or more security measures.

Assignments (1)

Continuity (1)

References Cited (15)