Automated management of confidential data in cloud environments

US9996698B2 · kind B2 · utility

Assignee

• International Business Machines Corporation · US

Inventors

• Marcus Breuer · Oppenheim, DE
• Itzhack Goldberg · Hadera, IL
• Thorsten Muehge · Mainz, DE
• Erik Rueger · Mainz, DE
• Matthias Seul · Kassel, DE

Key dates

• Filing date: Nov 23, 2015
• Grant date: Jun 12, 2018
• Expiry date: Apr 20, 2036

Classification

• Technology area (CPC G): Physics
• CPC primary: G06F21/6218
• WIPO field: Computer technology
• WIPO sector: Electrical engineering

Abstract

A shared networked storage may be separated from a key vault system. A storage request with data to be stored and the storage request with a confidentiality rating may be received. The confidentiality rating may indicate a level of confidentiality the data is associated with. The storage request with the data and the confidentiality rating may be received via a shared networked storage access interface by a security layer. The data to be stored by the key vault system and the confidentiality rating may be encrypted on request of the security layer and into a data container. The shared networked storage may be categorized into Cloud zones. Each Cloud zone may be assigned a trust level. The data container may be stored in one of the Cloud zones of the shared networked storage. The trust level of the one of the Cloud zones may correspond to the confidentiality rating.