SECURE STORAGE AND SHARING OF USER OBJECTS

摘要

Information objects model real-world objects or concepts that may be associated with users, such as vehicles, homes, people, animals, accounts, places, and the like. The objects have a set of associated properties, which have corresponding required protection levels indicating a level of permission that another user must have to the object in order to be able to receive and access the value of that property in the object. Objects are stored by a framework using techniques that reduce or eliminate the possibility of unauthorized access. For example, an object is durably stored in encrypted form in device storage, with the values of properties encrypted in different manners according to the different corresponding protection levels. When sharing an object with another user or other entity, the required protection levels of the object properties are respected in order to prohibit the other entity from obtaining access to unauthorized portions of an object.

主权项

1. A computer-implemented method comprising:
receiving, on a first device, an indication of a type of a first object, the type having a plurality of associated properties; receiving, on the first device, values of the first object for a plurality of the properties associated with the type, and indications of a plurality of corresponding protection levels for the plurality of the properties; associating a different encryption key with each of the plurality of protection levels; and storing the first object on the first device, the values for the properties for each of the protection levels encrypted using the encryption key associated with the protection level.