IP Library Granted Patent US 10,693,895
Granted Patent B2
US 10,693,895 · App. 15/328,023 · Granted Jun 23, 2020

Security indicator access determination

Inventors: Anurag Singla (Sunnyvale, CA); Amir Kibbar (Yehud, IL); Tomas Sander (Princeton, NJ); Edward Ross (Austin, TX); Serhan Shbeita (Yehud, IL)
Assignee: Micro Focus LLC
H04L63/1425G06F21/6218H04L63/1441H04L63/20G06F2221/2115G06F2221/2141G06F2221/2147
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,693,895
App. No.
15/328,023
Granted
Jun 23, 2020
Kind
B2
Abstract

According to an example, security indicator access determination may include determining a security indicator that is received from a first entity by a security indicator sharing platform for sharing with a second entity. A rule associated with identification of a third entity that has access to the security indicator may be analyzed. The third entity may be different from the second entity, and if the second entity belongs to a community, the third entity may not be in the community of the second entity. A determination may be made as to whether to identify the third entity based on the analysis of the rule. In response to a determination that the third entity is to be identified or not to be identified, the third entity may be identified to the first entity, or not identified to the first entity.

Claims (38)

1. A non-transitory computer readable medium having stored thereon machine readable instructions to provide security indicator access determination, the machine readable instructions, when executed, cause at least one processor to:

determine that a security indicator is received from a first entity for sharing with a second entity;

analyze a rule associated with identification of a third entity that has access to the security indicator, wherein the third entity is different from the second entity, and if the second entity belongs to a community, the third entity is not in the community of the second entity;

determine whether to identify the third entity based on the analysis of the rule;

in response to a determination that the third entity is to be identified based on the analysis of the rule, identify the third entity to the first entity; and

in response to a determination that the third entity is not to be identified based on the analysis of the rule, not identify the third entity to the first entity.

2. The non-transitory computer readable medium of claim 1 , wherein the machine readable instructions, when executed, further cause the at least one processor to:

determine a confidentiality level for the security indicator based on the identification of the third entity.

3. The non-transitory computer readable medium of claim 2 , wherein the machine readable instructions, when executed, further cause the at least one processor to:

determine resources that are needed to protect from unauthorized disclosure of the security indicator based on the determination of the confidentiality level for the security indicator.

4. The non-transitory computer readable medium of claim 1 , wherein the machine readable instructions, when executed, further cause the at least one processor to:

implement a communication channel between the first entity and the third entity to facilitate collaboration between the first entity and the third entity.

5. The non-transitory computer readable medium of claim 1 , wherein the rule includes identification of a community or another attribute of the third entity to the first entity in response to a determination that a predetermined number of entities in the community of the third entity have access to the security indicator.

6. The non-transitory computer readable medium of claim 1 , wherein the rule includes identification of a community or another attribute of the third entity to the first entity in response to a determination that a predetermined percentage of entities in the community of the third entity have access to the security indicator.

7. The non-transitory computer readable medium of claim 1 , wherein the rule includes identification of a name of the third entity to the first entity in response to a determination that the security indicator has been shared in private communities.

8. The non-transitory computer readable medium of claim 1 , wherein the rule includes identification of a name of the third entity to the first entity in response to a determination that the first entity is on a pre-generated list of entities.

9. The non-transitory computer readable medium of claim 1 , wherein the rule includes identification of a name of the third entity to the first entity in response to a determination that the first entity has a rating that exceeds a predetermined rating threshold.

10. The non-transitory computer readable medium of claim 1 , wherein the second entity is included in a first community, and wherein the third entity is not included in the first community.

11. A security indicator access determination apparatus comprising:

at least one processor; and

a memory storing machine readable instructions that when executed by the at least one processor cause the at least one processor to:

determine that a security indicator is shared from a security indicator sharing platform with a recipient entity, wherein the security indicator is provided to the security indicator sharing platform by a sharing entity for sharing with an intermediate entity;

analyze a rule associated with identification of the recipient entity that has access to the security indicator to the sharing entity or identification of at least one of: the sharing entity and the intermediate entity to the recipient entity, wherein the recipient entity is different from the intermediate entity, and if the intermediate entity belongs to a community, the recipient entity is not in the community of the intermediate entity; and

determine whether to identify the recipient entity to the sharing entity or at least one of: the sharing entity and the intermediate entity to the recipient entity based on the analysis of the rule.

12. The security indicator access determination apparatus according to claim 11 , wherein the rule includes identification of a name of the recipient entity to the sharing entity in response to a determination that the sharing entity has submitted at least a predetermined number of security indicators including the security indicator to the security indicator sharing platform.

13. The security indicator access determination apparatus according to claim 11 , wherein the rule includes identification of a name of the recipient entity to the sharing entity in response to a determination that the sharing entity has submitted security indicators including the security indicator to the security indicator sharing platform for at least a predetermined time period.

14. The security indicator access determination apparatus according to claim 11 , wherein the intermediate entity is included in a first community, and wherein the recipient entity is not included in the first community.

15. A method for security indicator access determination, the method comprising:

determining, by at least one processor, a rule associated with identification of a recipient entity that has access to a security indicator that is received from a sharing entity by a security indicator sharing platform for sharing with an intermediate entity, wherein the recipient entity is different from the intermediate entity, and if the intermediate entity belongs to a community, the recipient entity is not in the community of the intermediate entity;

determining whether to identify the recipient entity based on an analysis of the rule;

in response to a determination that the recipient entity is to be identified based on the analysis of the rule, identifying the recipient entity to the sharing entity; and

in response to a determination that the recipient entity is not to be identified based on the analysis of the rule, not identifying the recipient entity to the sharing entity.

16. The method according to claim 15 , wherein the rule includes an indication that an entity in a community of the sharing entity has access to the security indicator without disclosing a name of the entity in the community of the sharing entity.

17. The method according to claim 15 , wherein the rule includes an indication of a number of entities in a community of the sharing entity that have access to the security indicator without disclosing a name of any of the entities in the community of the sharing entity.

18. The method according to claim 15 , wherein the intermediate entity is included in a first community, and wherein the recipient entity is not included in the first community.

19. The method according to claim 15 , comprising:

implementing a communication channel between the sharing entity and the recipient entity to provide collaboration between the sharing entity and the recipient entity.

20. The method according to claim 15 , wherein the rule includes identification of a community of the recipient entity to the sharing entity in response to a determination that a predetermined number of entities in the community of the recipient entity have access to the security indicator.

Assignments (8)
RELEASE OF SECURITY INTEREST REEL/FRAME 044183/0577 Recorded Feb 2, 2023
From: JPMORGAN CHASE BANK, N.A.
To: MICRO FOCUS LLC (F/K/A ENTIT SOFTWARE LLC)
Reel/Frame 063560/0001 →
RELEASE OF SECURITY INTEREST REEL/FRAME 044183/0718 Recorded Feb 2, 2023
From: JPMORGAN CHASE BANK, N.A.
To: MICRO FOCUS LLC (F/K/A ENTIT SOFTWARE LLC); BORLAND SOFTWARE CORPORATION; MICRO FOCUS (US), INC.; SERENA SOFTWARE, INC; ATTACHMATE CORPORATION; MICRO FOCUS SOFTWARE INC. (F/K/A NOVELL, INC.); NETIQ CORPORATION
Reel/Frame 062746/0399 →
CHANGE OF NAME Recorded Aug 8, 2019
From: ENTIT SOFTWARE LLC
To: MICRO FOCUS LLC
Reel/Frame 050004/0001 →
SECURITY INTEREST Recorded Oct 11, 2017
From: ATTACHMATE CORPORATION; BORLAND SOFTWARE CORPORATION; NETIQ CORPORATION; MICRO FOCUS (US), INC.; MICRO FOCUS SOFTWARE, INC.; ENTIT SOFTWARE LLC; ARCSIGHT, LLC; SERENA SOFTWARE, INC.
To: JPMORGAN CHASE BANK, N.A.
Reel/Frame 044183/0718 →
SECURITY INTEREST Recorded Oct 11, 2017
From: ENTIT SOFTWARE LLC; ARCSIGHT, LLC
To: JPMORGAN CHASE BANK, N.A.
Reel/Frame 044183/0577 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 9, 2017
From: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP
To: ENTIT SOFTWARE LLC
Reel/Frame 042746/0130 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 6, 2017
From: HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P.
To: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP
Reel/Frame 042179/0200 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 21, 2017
From: SINGLA, ANURAG; KIBBAR, AMIR; SANDER, TOMAS; ROSS, TED; SHBEITA, SERHAN
To: HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P.
Reel/Frame 041035/0446 →