Publishing sensitive data

[richardschneider]

Problem

As a publisher of data
I want only authorised people to read that data
So that sensistive information is always protected

[richardschneider]

Solution

• Encrypt the data with a key so that it is protects the data
• Only give the key to authorised people

[richardschneider]

Design

• A key store is needed to manage the life cycle of a key The Key Chain #2
• When writing protected data, encrypt the data with a key Encrypting data #7
• When reading protected data, decrypt the data when the key is available; otherwise fail
• Allow a person to request a key
• Allow a publisher to send a key

[richardschneider]

NFRs

• The key is sensitive data, it too must be protected
• Think of the key store as a HSM, even if implemented in software
• A raw private key (naked key) can never escape from the key store
• Requesting and sending a key is a multi-step process, any party can be off-line
• Follow acceptable security standards