IP Library Granted Patent US 11,106,813
Granted Patent B2
US 11,106,813 · App. 16/577,046 · Granted Aug 31, 2021

Credentials for consent based file access

Inventors: Aris Gkoulalas-Divanis (Waltham, MA); Corville O. Allen (Morrisville, NC)
Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATION
G06F21/6218G06F16/10G06F21/31G06F2221/2141
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,106,813
App. No.
16/577,046
Granted
Aug 31, 2021
Kind
B2
Abstract

An approach is disclosed for providing built-in consent permissions for users, groups, processes, and programs accessing a part of a filesystem. The method includes integrating a consent access control into a plurality of files in a filesystem. A first request from a first requestor to access information from a first file in the filesystem is received. A first access policy for the first requestor is determined. The first access policy includes a first selective data conversion. A second request from a second requestor to access information from the first file in the filesystem is received. A second access policy including a second selective data conversion for the second requestor different from the first access policy for the first requestor is determined. An access control mode that enables or inhibits enforcement of the built-in permissions is provided.

Claims (39)

1. A method for providing built-in consent permissions for users, groups, processes, and programs accessing a part of a filesystem within a storage of an information handling system (a local node) that includes a processor and a memory accessible by the processor, the method comprising:

integrating a consent access control into a plurality of files in a filesystem;

receiving a first request from a first requestor to access information from a first file in the filesystem;

determining a first access policy for the first requestor wherein the first access policy includes a first selective data conversion;

receiving a second request from a second requestor to access information from the first file in the filesystem; and

determining a second access policy for the second requestor different from the first access policy for the first requestor; and

providing an access control mode wherein the access control mode is one of an access control mode on and an access control mode off and wherein the access control mode on enforces usage of the built-in consent permissions to the part of the filesystem and the access control mode off inhibits enforcing usage of the built-in consent permissions and wherein the second access policy includes a second selective data conversion.

2. The method of claim 1 , wherein the second requestor is a backup executable and the access control mode is off.

3. The method of claim 1 , wherein the consent access control is determined dynamically based on metadata, a sensitivity of content to be accessed, and ownership of the content.

4. The method of claim 1 , wherein the consent access control is based on an identified purpose for receiving the access information.

5. The method of claim 4 , wherein the identified purpose is an analysis of a treatment option based on a demography.

6. The method of claim 4 , wherein content read from the filesystem is automatically processed utilizing a technique selected from a group consisting of pseudonymization and anonymization according to the built-in consent permissions of the filesystem.

7. The method of claim 4 , wherein content read from the filesystem is automatically processed utilizing a technique selected from a group consisting of pseudonymization and anonymization based on a restriction determined by an owner of a file in the filesystem.

8. An information handling system (a local node) for providing built-in consent permissions for users, groups, processes, and programs accessing a part of a filesystem comprising:

one or more processors;

a memory coupled to at least one of the processors;

a network interface that connects the local node to one or more remote nodes; and

a set of computer program instructions stored in the memory and executed by at least one of the processors in order to perform actions comprising:

integrating a consent access control into a plurality of files in a filesystem;

receiving a first request from a first requestor to access information from a first file in the filesystem;

determining a first access policy for the first requestor wherein the first access policy includes a first selective data conversion;

receiving a second request from a second requestor to access information from the first file in the filesystem; and

determining a second access policy for the second requestor different from the first access policy for the first requestor; and

providing an access control mode wherein the access control mode is one of an access control mode on and an access control mode off and wherein the access control mode on enforces usage of the built-in consent permissions to the part of the filesystem and the access control mode off inhibits enforcing usage of the built-in consent permissions and wherein the second access policy includes a second selective data conversion.

9. The information handling system of claim 8 , wherein the consent access control is determined dynamically based on metadata, a sensitivity of content to be accessed, and ownership of the content.

10. The information handling system of claim 9 , wherein the second requestor is a backup executable and the access control mode is off.

11. The information handling system of claim 8 , wherein the consent access control is based on an identified purpose for receiving the access information.

12. The information handling system of claim 11 , wherein the identified purpose is an analysis of treatment option based on a demography.

13. A computer program product for providing built-in consent permissions for users, groups, processes, and programs accessing a part of a filesystem stored in a computer readable storage medium, comprising computer program code that, when executed by an information handling system (a local node), performs actions comprising:

integrating a consent access control into a plurality of files in a filesystem;

receiving a first request from a first requestor to access information from a first file in the filesystem;

determining a first access policy for the first requestor wherein the first access policy includes a first selective data conversion;

receiving a second request from a second requestor to access information from the first file in the filesystem;

determining a second access policy for the second requestor different from the first access policy for the first requestor; and

providing an access control mode wherein the access control mode is one of an access control mode on and an access control mode off and wherein the access control mode on enforces usage of the built-in consent permissions to the part of the filesystem and the access control mode off inhibits enforcing usage of the built-in consent permissions and wherein the second access policy includes a second selective data conversion.

14. The computer program product of claim 13 , wherein the second requestor is a backup executable and the access control mode is off.

15. The computer program product of claim 13 , wherein the wherein the consent access control is determined dynamically based on metadata, a sensitivity of content to be accessed, and ownership of the content.

16. The computer program product of claim 13 , wherein the consent access control is based on an identified purpose for receiving the access information.

17. The computer program product of claim 16 , wherein the identified purpose is an analysis of a treatment option based on a demography.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 20, 2019
From: GKOULALAS-DIVANIS, ARIS; ALLEN, CORVILLE O.
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 050442/0165 →
Continuity (1)
Related Publication 20210089671A1 · Mar 25, 2021
Cited By (2)
US 12,277,239 US 12,292,987