Methods of execution by computers, computer programs, and systems (prevention of information leakage)
By using the compilation keyword ccs to mark sensitive data with a new attribute DW_at_cc_sensitive in the DWARF section of the ELF file, the system restricts access during debugging sessions, addressing data leakage and unauthorized access in confidential computing environments.
JP2026093321APending Publication Date: 2026-06-08INTERNATIONAL BUSINESS MACHINE CORPORATION
Patent Information
- Authority / Receiving Office
- JP · JP
- Patent Type
- Applications
- Current Assignee / Owner
- INTERNATIONAL BUSINESS MACHINE CORPORATION
- Filing Date
- 2025-09-08
- Publication Date
- 2026-06-08
AI Technical Summary
Technical Problem
Existing systems fail to effectively restrict access to sensitive data during debugging sessions in a confidential computing environment, leading to potential data leakage and unauthorized access.
Method used
The implementation of a compilation keyword (ccs) to mark sensitive data elements in microservice source code with a new attribute (DW_at_cc_sensitive) during compilation, embedding this attribute in the DWARF section of the ELF file, and enforcing access control to prevent unauthorized access during debugging sessions.
Benefits of technology
Enhances security by preventing data leakage and unauthorized access to sensitive data during debugging, ensuring compliance with data privacy regulations and maintaining trust with clients and regulators.
✦ Generated by Eureka AI based on patent content.
Smart Images
Figure 2026093321000001_ABST
Abstract
This invention relates to the prevention of information leakage. [Solution] The embodiment checks that the debugging mode of the code enables data protection compilation; in response that the debugging mode of the code enables data protection compilation, loads a debugging information entry having a new attribute having a true value; starts a debugging session for the code; parses the debugging information entry having the new attribute; in response to parsing the debugging information entry having the new attribute, determines that the new attribute has a true value; in response to determining that the new attribute has a true value, generates an enhanced debugging reply packet having a protection flag having a true value; and in response to determining that the new attribute has a true value, prevents access to the variable of the code.
Need to check novelty before this filing date? Find Prior Art