Joseph B Kerr

US Patent:

63246465, Nov 27, 2001

Filed:

Sep 11, 1998

Appl. No.:

9/150977

Inventors:

David De-Hui Chen - Cary NC
Joseph Brendan Kerr - Cary NC
Stephen Anton Owen - Raleigh NC

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

G06F 1214
G06F 1730
H04L 932

US Classification:

713201

Abstract:

A method and system for securing confidential data in a computer network, wherein the computer network includes a management information database that assists in the management of the computer network. Initially, confidential data are identified within the management information database. Next, particular data objects are associated with the identified confidential data. Thereafter, the identified confidential data are accessed from the management information database. Finally each particular data object and its associated confidential data are automatically converted into a secure data object, in response to accessing the confidential data from the management information database, such that the confidential data may only be understood or altered external to the management information database by converting the secure data object back into the particular data objects and the associated confidential data. The particular data objects may comprise primitive data objects while the secure data object may be composed of an opaque data object. Network management format and conventions may be governed by a network management protocol.