The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Oct. 05, 2021

Filed:

Oct. 25, 2017
Applicant:

International Business Machines Corporation, Armonk, NY (US);

Inventors:

Pietro Ferrara, Verona, IT;

Marco Pistoia, Amawalk, NY (US);

Omer Tripp, San Jose, CA (US);

Petar Tsankov, Zurich, CH;

Attorney:
Primary Examiner:
Assistant Examiner:
Int. Cl.
CPC ...
G06F 21/60 (2013.01); G06F 21/62 (2013.01); H04L 9/32 (2006.01); H04L 9/08 (2006.01); G06F 21/16 (2013.01); H04L 9/06 (2006.01);
U.S. Cl.
CPC ...
G06F 21/602 (2013.01); G06F 21/16 (2013.01); G06F 21/62 (2013.01); G06F 21/6245 (2013.01); H04L 9/0618 (2013.01); H04L 9/0643 (2013.01); H04L 9/08 (2013.01); H04L 9/32 (2013.01); H04L 2209/60 (2013.01); H04L 2209/80 (2013.01);
Abstract

A computer system performs tracking of security context for confidential or untrusted values input from sources in an executing application to sinks in the executing application. The security context includes indications of sources and declassifier methods corresponding to the values and has been previously defined prior to the tracking. Prior to release of a selected confidential or untrusted value by a sink in the executing application, security context is fetched for the selected confidential or untrusted value. A selected declassifier method is caused to be used on the selected confidential or untrusted value prior to release of the selected confidential or untrusted value to the sink. The selected declassifier method obfuscates the selected confidential or untrusted value and is selected based on the security context for the selected confidential or untrusted value. The obfuscated confidential or untrusted value is caused to be released to the sink in the executing application.


Find Patent Forward Citations

Loading…