Bluesalt security

Patent metadata

Field	Value
Publication number	US-9698982-B2
Application number	US-201715397217-A
Country	US
Kind code	B2
Filing date	Jan 3, 2017
Priority date	Sep 2, 2015
Publication date	Jul 4, 2017
Grant date	Jul 4, 2017

Abstract

Embodiments of the present invention disclose a method, system, and computer program product for bluesalt security. A computer receives a confidential data configuration wherein specific sensor are assigned to specific confidential information. The assigned sensors are measured for values as a system administrator enters a password corresponding to the confidential information. The measured values are converted into a salt and concatenated with the password to generate a primary key. The primary key is used to encrypt the confidential information, then the primary key is encrypted using a secondary key comprised of a second password with a second set of sensor information as the salt. The encrypted key is saved securely while the secondary key is destroyed. In order to decrypt the confidential information, a user must replicate the password and sensor values to generate the primary or secondary key.

First claim

What is claimed is:

1. A computer system for a bluesalt security program, the computer system comprising:
one or more computer processors, one or more computer-readable storage media, and program instructions stored on one or more of the computer-readable storage media for execution by at least one of the one or more processors, the program instructions comprising:
program instructions to encrypt data symmetrically with a primary configuration hash key, wherein the primary configuration hash key is based, at least in part, on a primary configuration password and one or more primary configuration sensor values measured by one or more primary sensors;
program instructions to encrypt the primary configuration hash key symmetrically with a secondary configuration hash key, wherein the secondary configuration hash key is based, at least in part, on a secondary configuration password and one or more secondary configuration sensor values measured by one or more secondary sensors;
program instructions to receive an access request to access the encrypted data from a user, wherein the access request includes a primary user password;
program instructions to reference the one or more primary sensors to obtain one or more primary user sensor values;
program instructions to convert the one or more primary user sensor values into a primary user salt value;
program instructions to concatenate the primary user password and the primary user salt value into a primary user hash key;
program instructions to determine whether the primary user hash key decrypts the encrypted data;
based on determining that the primary user hash key does not decrypt the encrypted data, program instructions to prompt the user for a secondary user password;
program instructions to reference the one or more secondary sensors to obtain one or more secondary user sensor values;
program instructions to convert the one or more secondary user sensor values into a secondary user salt value;
program instructions to concatenate the secondary user password and the secondary user salt value into a secondary user hash key;
program instructions to determine whether the secondary user hash key decrypts the encrypted primary configuration hash key; and
based on the determining that the secondary user hash key decrypts the encrypted primary configuration hash key, program instructions to decrypt the encrypted data with the decrypted, encrypted primary configuration hash key.

Assignees

• IBM

Inventors

• Dash Samir K

Classifications

• H04L9/0863 Primary

  involving passwords or one-time passwords (network architectures or network communication protocols for using one-time keys in a packet data network H04L63/067) · CPC title

• H04W84/18

  Self-organising networks, e.g. ad-hoc networks or sensor networks · CPC title

• H04L63/0428

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04L63/0876

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title

• H04L9/3242

  involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC · CPC title