专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US09613038B2 Digital data retention management 有权
公开(公告)号：US09613038B2
公开(公告)日：2017-04-04
申请号：US14464855
申请日：2014-08-21
申请人： International Business Machines Corporation
发明人： Michael E. Factor , Bernhard Kurtz , David Lebutsch , Cataldo Mega , Alexandra Shulman-Peleg , Tim Waizenegger
IPC分类号： G06F17/30 , G06F21/62
CPC分类号： G06F17/30085 , G06F17/30117 , G06F17/3012 , G06F21/6209
摘要： Embodiments relate to digital data retention management. An aspect includes calculating a retention date associated with a data object in a storage system. Another aspect includes generating a cryptographic checksum for metadata relating to said data object, the metadata comprising the retention date. Another aspect includes storing said metadata and said cryptographic checksum. Another aspect includes, based on receiving a request to perform a deletion transaction on said data object for deleting said data object from the storage system: verifying metadata validity by checking the cryptographic checksum for the metadata associated with said data object to detect possible tampering of the metadata; verifying retention expiration by determining that a current date is past the retention date comprised in said metadata; and based on successful verification of metadata validity and retention expiration, authorizing deletion of said data object by the storage system.

2. 发明授权

US09548866B2 Deletion of content in digital storage systems 有权
标题翻译：删除数字存储系统中的内容
公开(公告)号：US09548866B2
公开(公告)日：2017-01-17
申请号：US15046673
申请日：2016-02-18
申请人： International Business Machines Corporation
发明人： Jonathan M. Barney , David Lebutsch , Cataldo Mega , Stefan Schleipen , Tim Waizenegger
IPC分类号： H04L29/06 , H04L9/32 , G06F21/78 , G06F21/62 , G06F12/14 , H04L9/14
CPC分类号： H04L9/3242 , G06F12/1408 , G06F21/6218 , G06F21/78 , G06F2212/1052 , G06F2221/2143 , H04L9/14 , H04L2209/24
摘要： A data processing and storage apparatus has a hardware security module and a data storage medium storing encrypted data objects and a hierarchical data maintenance structure of encrypted partition tables and hash-nodes forming a rooted tree, where a given partition table comprises a first reference to a given encrypted data object and a first cryptographic key for decryption thereof, where a given hash-node comprises a second reference to a partition tables or hash-node and a second cryptographic key being suitable for decryption thereof, and where the root node is decipherable using a master cryptographic key stored in the hardware security module, the given data object being assigned to the root node via the first and second references of the given partition table and the given hash-nodes forming a set of successive nodes in the rooted tree.
摘要翻译：数据处理和存储装置具有硬件安全模块和存储加密数据对象的数据存储介质和形成有根树的加密分区表和散列节点的分层数据维护结构，其中给定的分区表包括对给定的加密数据对象和用于解密的第一加密密钥，其中给定的散列节点包括对分区表或散列节点的第二参考，以及适合于其解密的第二密码密钥，并且其中根节点可以使用存储在硬件安全模块中的主密码密钥，给定的数据对象经由给定分区表的第一和第二参考以及给定的散列节点分配给根节点，该散列节点形成有根树中的一组连续节点。

3. 发明授权

US09298951B2 Deletion of content in digital storage systems 有权
标题翻译：删除数字存储系统中的内容
公开(公告)号：US09298951B2
公开(公告)日：2016-03-29
申请号：US14547940
申请日：2014-11-19
申请人： International Business Machines Corporation
发明人： Jonathan M. Barney , David Lebutsch , Cataldo Mega , Stefan Schleipen , Tim Waizenegger
IPC分类号： G06F21/78 , G06F21/62
CPC分类号： H04L9/3242 , G06F12/1408 , G06F21/6218 , G06F21/78 , G06F2212/1052 , G06F2221/2143 , H04L9/14 , H04L2209/24
摘要： A data processing and storage apparatus has a hardware security module and a data storage medium storing encrypted data objects and a hierarchical data maintenance structure of encrypted partition tables and hash-nodes forming a rooted tree, where a given partition table comprises a first reference to a given encrypted data object and a first cryptographic key for decryption thereof, where a given hash-node comprises a second reference to a partition tables or hash-node and a second cryptographic key being suitable for decryption thereof, and where the root node is decipherable using a master cryptographic key stored in the hardware security module, the given data object being assigned to the root node via the first and second references of the given partition table and the given hash-nodes forming a set of successive nodes in the rooted tree.
摘要翻译：数据处理和存储装置具有硬件安全模块和存储加密数据对象的数据存储介质和形成有根树的加密分区表和散列节点的分层数据维护结构，其中给定的分区表包括对给定的加密数据对象和用于解密的第一加密密钥，其中给定的散列节点包括对分区表或散列节点的第二参考，以及适合于其解密的第二密码密钥，并且其中根节点可以使用存储在硬件安全模块中的主密码密钥，给定的数据对象经由给定分区表的第一和第二参考以及给定的散列节点分配给根节点，该散列节点形成有根树中的一组连续节点。

4. 发明授权

US09824231B2 Retention management in a facility with multiple trust zones and encryption based secure deletion 有权
公开(公告)号：US09824231B2
公开(公告)日：2017-11-21
申请号：US14582220
申请日：2014-12-24
申请人： International Business Machines Corporation
发明人： Michael Factor , Daivid Lebutsch , Alexandra Shulman-Peleg , Tim Waizenegger
IPC分类号： G06F21/00 , G06F21/62 , H04L9/08 , G06F21/60 , H04L29/06
CPC分类号： G06F21/6218 , G06F21/602 , G06F2221/2137 , H04L9/0822 , H04L9/0861 , H04L9/088 , H04L9/0894 , H04L63/0428 , H04L63/108 , H04L2209/60
摘要： A computing facility, including a storage management system belonging to a first trust zone having a first privilege level, a metadata management system belonging to a second trust zone having a second privilege level higher than the first privilege level, and a security management system belonging to a third trust zone having a third privilege level higher than or equal to the second privilege level. The storage management system is and configured to store multiple content entities, and the metadata management system is configured to manage, for each of the multiple content entities, metadata including a respective content encryption key and a respective retention time, each of the content entities being encrypted by its respective content encryption key. The security management system is configured to manage a master encryption key used to create the respective content encryption keys, and to confirm expiration of the respective retention times.

5. 发明申请

US20150134619A1 DIGITAL DATA RETENTION MANAGEMENT 有权
标题翻译：数字资料保存管理
公开(公告)号：US20150134619A1
公开(公告)日：2015-05-14
申请号：US14464855
申请日：2014-08-21
申请人： International Business Machines Corporation
发明人： Michael E. Factor , Bernhard Kurtz , David Lebutsch , Cataldo Mega , Alexandra Shulman-Peleg , Tim Waizenegger
IPC分类号： G06F17/30
CPC分类号： G06F17/30085 , G06F17/30117 , G06F17/3012 , G06F21/6209
摘要： Embodiments relate to digital data retention management. An aspect includes calculating a retention date associated with a data object in a storage system. Another aspect includes generating a cryptographic checksum for metadata relating to said data object, the metadata comprising the retention date. Another aspect includes storing said metadata and said cryptographic checksum. Another aspect includes, based on receiving a request to perform a deletion transaction on said data object for deleting said data object from the storage system: verifying metadata validity by checking the cryptographic checksum for the metadata associated with said data object to detect possible tampering of the metadata; verifying retention expiration by determining that a current date is past the retention date comprised in said metadata; and based on successful verification of metadata validity and retention expiration, authorizing deletion of said data object by the storage system
摘要翻译：实施例涉及数字数据保留管理。一方面包括计算与存储系统中的数据对象相关联的保留日期。另一方面包括为与所述数据对象相关的元数据生成加密校验和，所述元数据包括保留日期。另一方面包括存储所述元数据和所述密码校验和。另一方面包括：基于接收对所述数据对象执行删除事务的请求以从所述存储系统中删除所述数据对象：通过检查与所述数据对象相关联的元数据的加密校验和来检验元数据有效性，以检测所述数据对象的可能的篡改元数据通过确定当前日期超过所述元数据中包含的保留日期来验证保留期满; 并且基于元数据有效性和保留期限的成功验证，授权存储系统删除所述数据对象

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式