Patent ID: 8484699
Filing Date: 2013-07-09
Classification: G06F,H04L

Abstract:
1. A computer-implemented method of achieving context-sensitive confidentiality within a federated environment, the method comprising: determining a network route to be taken by a message to be transmitted in the federated environment, the network route crossing a plurality of security domains in the federated environment and the message requesting a service or content from at least a selected one of a plurality of nodes to be encountered on the determined route; determining, prior to transmitting the message over the network route, at least one portion of the message that is security-sensitive and, for each of the nodes and each of the security-sensitive portions, whether the node is entitled to access the security-sensitive portion, wherein: selectively protecting, in the message prior to transmitting the message over the network route, each of the at least one security-sensitive portion of the message for each distinct one of the nodes which is entitled to access the security-sensitive portion; creating a message receiver element for each of the selectively-protected at least one portion of the message and each of the one or more nodes which is entitled to access the selectively-protected portion, the message receiver element identifying the one or more nodes and providing a node-specific keyword corresponding to the one or more nodes; and transmitting the message on the determined network route, the message receiver elements enabling each of the nodes to locate and access each security-sensitive portion which the node is entitled to access and preventing the node from accessing any security-sensitive portion which the node is not entitled to access.