Sap Ag

Smriti Kumar Sinha

Azzedine Benameur

Paul El Khoury

A method and a system for evaluation of risk of conflict between a number of integrating security solutions. In a computer system, a number of fragmentary security solutions are received. A set of the received fragmentary security solutions is integrated to form a composite security solution to satisfy a number of security requirements. In one aspect, the security requirements are established during a design of a computer system. A risk of conflict between the set of integrating fragmentary security solutions is evaluated. In another aspect, the risk of conflict between the set of integrating fragmentary security solutions exists at authority level and at configuration level. Conflict at authority level arises when different authorities control the same fragmentary security solution. Conflict at configuration level arises when integrating fragmentary security solutions share configuration data.

Evaluation of risk of conflict for security solutions integration

The present description refers in particular to example computer-implemented methods, example computer program products, and example computer systems for automatically generating or verifying a digital signature for a message. The message may be representable in a hierarchical tree structure. An example computer-implemented method may comprise: selecting, from a message M, a sub-message M to be signed, the sub-message M comprising at least one element; generating a well-formed context Cfor the sub-message M, wherein the well-formed context Cdefines a derivation path to the element in the message Mat a time t, the element being marked [M] in the well-formed context C; generating a message digest &#x3b4;from the sub-message M and a context digest &#x3b4;from the well-formed context C; and generating a signature S by applying a secret key Sof a user A to the message digest &#x3b4;and to the context digest &#x3b4;.

Growing community of inventors

Tezpur, India

Smriti Kumar Sinha