Context based secure communication

Patent metadata

Field	Value
Publication number	US-11539521-B2
Application number	US-202017122011-A
Country	US
Kind code	B2
Filing date	Dec 15, 2020
Priority date	Dec 15, 2020
Publication date	Dec 27, 2022
Grant date	Dec 27, 2022

Abstract

By analyzing a content of a first message, a confidentiality level of the first message is determined. An encryption rule for a first computational complexity level corresponding to the confidentiality level of the first message is selected. The first message is encoded according to the encryption rule. The encoded first message and the confidentiality level of the first message are caused to be sent to a recipient.

First claim

What is claimed is:

1. A computer-implemented method comprising:
categorizing, into a category in a set of categories by analyzing a content of a first message, the first message;
selecting, according to the category, a confidentiality level of the first message;
selecting, for a first computational complexity level selected according to the confidentiality level of the first message, an encryption rule of the first computational complexity level;
encoding, according to the encryption rule, the first message, the encoding generating an encoded first message;
causing sending, to a recipient, the encoded first message and the confidentiality level of the first message;

causing receiving, from the recipient, an encoded second message and a confidentiality level of the encoded second message;
selecting, for a second computational complexity level corresponding to the confidentiality level of the encoded second message, a decryption rule; and
decoding, according to the decryption rule, the encoded second message.

2. The computer-implemented method of claim 1 , wherein
categorizing, into the category in the set of categories, the content of the first message is performed using a natural language processing model on textual content of the first message.

3. The computer-implemented method of claim 1 , wherein the encryption rule is selected based on a property of the first message.

4. The computer-implemented method of claim 1 , wherein the encryption rule is selected based on a property of a message sequence, the message sequence comprising a set of messages, each message in the set of messages having the same sender and receiver as the first message.

5. The computer-implemented method of claim 4 , wherein the first message is a most recent message in the message sequence.

6. The computer-implemented method of claim 1 , wherein the encryption rule encodes the first message using a content of a previous message, the previous message having the same sender and receiver as the first message.

7. The computer-implemented method of claim 1 , wherein the encryption rule encodes the first message using a property of a previous message between the same sender and receiver as the first message.

8. A computer program product for context based encoded communication, the computer program product comprising: one or more computer readable storage media, and program instructions collectively stored
on the one or more computer readable storage media, the program instructions comprising:
program instructions to categorize, into a category in a set of categories, by analyzing a content of a first message, the first message;
program instructions to select, according to the category, a confidentiality level of the first message;
program instructions to select, for a first computational complexity level selected according corresponding to the confidentiality level of the first message, an encryption rule of the first computational complexity level;
program instructions to encode, according to the encryption rule, the first message, the encoding generating an encoded first message;
program instructions to cause sending, to a recipient, the encoded first message and the confidentiality level of the first message;
program instructions to cause receiving, from the recipient, an encoded second message and a confidentiality level of the encoded second message;
program instructions to select, for a second computational complexity level corresponding to the confidentiality level of the encoded second message, a decryption rule; and
program instructions to decode, according to the decryption rule, the encoded second message.

9. The computer program product of claim 8 , wherein
program instructions to categorize, into the category in the set of categories, the content of the first message is performed using a natural language processing model on textual content of the first message.

10. The computer program product of claim 8 , wherein the encryption rule is selected based on a property of the first message.

11. The computer program product of claim 8 , wherein the encryption rule is selected based on a property of a message sequence, the message sequence comprising a set of messages, each message in the set of messages having the same sender and receiver as the first message.

12. The computer program product of claim 11 , wherein the first message is a most recent message in the message sequence.

13. The computer program product of claim 8 , wherein the encryption rule encodes the first message using a content of a previous message, the previous message having the same sender and receiver as the first message.

14. The computer program product of claim 8 , wherein the encryption rule encodes the first message using a property of a previous message between the same sender and receiver as the first message.

15. The computer program product of claim 8 , wherein the stored program instructions are stored in the at least one of the one or more storage media of a local data processing system, and wherein the stored program instructions are transferred over a network from a remote data processing system.

16. The computer program product of claim 8 , wherein the stored program instructions are stored in the at least one of the one or more storage media of a server data processing system, and wherein the stored program instructions are downloaded over a network to a remote data processing system for use in a computer readable storage device associated with the remote data processing system.

17. The computer program product of claim 8 , wherein the computer program product is provided as a service in a cloud environment.

18. A computer system comprising one or more processors, one or more computer-readable memories, and one or more computer-readable storage devices, and program instructions stored on at least one of the one or more storage devices for execution by at least one of the one or more processors via at least one of the one or more memories, the stored program instructions comprising:
program instructions to categorize, into a category in a set of categories, by analyzing a content of a first message, the first message;
program instructions to select, according to the category, a confidentiality level of the first message;
program instructions to select, for a first computational complexity level selected according corresponding to the confidentiality level of the first message, an encryption rule of the first computational complexity level;
program instructions to encode, according to the encryption rule, the first message, the encoding generating an encoded first message;
program instructions to cause sending, to a recipient, the encoded first message and the confidentiality level of the first message;
program instructions to cause receiving, from the recipient, an encoded second message and a confidentiality level of the encoded second message;
program instructions to cause select, for a second computational complexity level corresponding to the confidentiality level of the encoded second message, a decryption rule; and
program instructions to decode, according to the decryption rule, the encoded second message.

Assignees

• IBM

Inventors

• Liu Su
• Xia Yin
• Xu Cheng
• Wang Xinya

Classifications

• H04L9/32 Primary

  including means for verifying the identity or authority of a user of the system {or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials} · CPC title

• H04L63/105

  Multiple levels of security · CPC title

• H04L9/088

  Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms (network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068) · CPC title

• H04L63/0428

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04L63/20

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title