公开(公告)号：US10963167B2

公开(公告)日：2021-03-30

申请号：US15858882

申请日：2017-12-29

Applicant: GEMALTO SA ,  SafeNet Inc.

Inventor： Didier Hugot ,  Asad Ali ,  Gorav Arora

IPC: G06F21/79 ,  G06F3/06 ,  G06F21/62 ,  G06F21/60 ,  H04L29/06 ,  G06F21/44 ,  G06F21/31

Abstract: The invention relates to a method for managing data access. The method includes receiving at least one request for accessing data; capturing data relating to at least one current context signal during each data access request; comparing, as a current authorization step, the data relating to at least one captured current context signal to predetermined reference data relating to at least one corresponding context signal according to at least one corresponding predetermined authorization policy; determining, based upon the current authorization result and at least one predetermined dynamic data access policy, whether the data access is or is not authorized, as a data access decision; and issuing the data access decision. The invention also relates to corresponding first device, second device and system.

公开(公告)号：US20190205045A1

公开(公告)日：2019-07-04

申请号：US15858882

申请日：2017-12-29

Applicant: GEMALTO SA ,  SafeNet Inc.

Inventor： Didier Hugot ,  Asad Ali ,  Gorav Arora

IPC: G06F3/06

CPC classification number: G06F3/0622 ,  G06F3/0637 ,  G06F3/067 ,  G06F21/31 ,  G06F21/44 ,  G06F21/604 ,  G06F21/62 ,  G06F2221/2113 ,  G06F2221/2129 ,  G06F2221/2141 ,  H04L63/08 ,  H04L63/10 ,  H04L2463/082

Abstract: The invention relates to a method for managing data access. The method includes receiving at least one request for accessing data; capturing data relating to at least one current context signal during each data access request; comparing, as a current authorization step, the data relating to at least one captured current context signal to predetermined reference data relating to at least one corresponding context signal according to at least one corresponding predetermined authorization policy; determining, based upon the current authorization result and at least one predetermined dynamic data access policy, whether the data access is or is not authorized, as a data access decision; and issuing the data access decision. The invention also relates to corresponding first device, second device and system.