Patent ID: 9507929
Filing Date: 2016-11-29
CPC Classification: G06F

Claim Text:
1. A method of securing information flow in an information system comprising: intercepting access requests to information in the information system by all applications running in the information system; intuitively assigning labels to all the information and the applications depending on the application requirements constituting state information including assigning the labels to all subjects corresponds to active entities whose actions cause information to flow and all objects corresponds to passive entities containing the information in the said information system, wherein the label assigned to the subject and the object are defined as (A, R, W) where A is a function denoting first component or administration of the label, R is a function denoting second component or readers of the label and W is a function denoting third component or writers of the label; combining the application making the access request and the information for which the access request is made with their respective labels; checking allowance of the access request based on comparison of the label corresponding to the application making the access request and the label corresponding to the information for which the access request is made by comparing the label corresponding to the subject making the access request with the label corresponding to the object for which the access request is made; accordingly providing access of the information to the application on detection of allowable access request following: allowing access when the subject ‘s’ with label (s allowing access when the subject ‘s’ with label (s allowing access when the subject ‘s’ with label (s allowing access when the subject ‘s’ with label (s else denying the access request.