Back to results
US 10,073,791 B2Granted
Securing files
AssigneeVera
InventorsPrakash Linga, Ajay Arora, Vladimir Buzuev, Maurice C. Evans
Life of this patent
Estimating the term…
Abstract
Data security access and management may require a server dedicated to monitoring document access requests and enforcing rules and policies to limit access to those who are not specifically identified as having access to the data. One example of operation may include selecting data to be protected via a user device, applying at least one policy to the data, storing the at least one policy in a data record identifying the data, modifying a data format of the data to create a modified data, and storing the modified data in memory.
Claims20
A method comprising:
- selecting data to be protected via a user device;
- applying at least one policy to the data;
- storing the at least one policy in a data record identifying the data, wherein the data record is stored in a databank that is separate from a storage location where the data is stored;
- tagging the data to identify the data is to be secured, and to limit access to the data to user profiles which are assigned a right to access the data, wherein a type of data tag assigned to the data, designates which of the user profiles may access the data according to the at least one policy;
- responsive to tagging the data, modifying a data format of the data to create a modified data, wherein the modified data is stored in a different file format than a file format of the data;
- encrypting the data responsive to applying the at least one policy;
- wrapping the modified data in a file wrapper after encrypting the modified data;
- storing the modified data in memory;
- identifying a data, access command attempting to access the modified data;
- intercepting the data access command via an audit agent;
- retrieving the at least one policy linked to the user profiles;
- and
- determining, via the at least one policy, whether one or more of the user profiles which submitted the data access command are authorized to perform the data access command.
10 more elements
An apparatus comprising:
- a processor configured
- to select data to be protected via a user device;
- apply at least one policy to the data;
- and
- a memory configured to store the at least one policy in a data record identifying the data, wherein the data record is stored in a separate location from a storage location where the data is stored;
- and
- wherein the processor is further configured to
- tag the data to identify the data is to be secured, and to limit access to the data to user profiles which are assigned a right to access the data, wherein a type of data tag assigned to the data designates which of the user profiles may access the data according to the at least one policy;
- responsive to the data being tagged, modify a data format of the data to create a modified data, wherein the modified data is stored in a different file format than a file format of the data;
- encrypt the data responsive to applying the at least one policy;
- wrap the modified data in a file wrapper after encrypting the modified data, and wherein the memory is configured to store the modified data in memory;
- identify a data access command attempting to access the modified data;
- intercept the data access command via an audit agent;
- retrieve the at least one policy linked to the user profiles;
- and
- determine, via the at least one policy, whether one or more of the user profiles which submitted the data access command are authorized to perform the data access command.
13 more elements
A non-transitory computer readable storage medium configured to store instructions that when executed causes a processor to perform:
- selecting data to be protected via a user device;
- applying at least one policy to the data;
- storing the at least one policy in a data record identifying the data, wherein the data record is stored in a databank that is separate from a storage location where the data is stored;
- tagging the data to identify the data is to be secured, and to limit access to the data to user profiles which are assigned a right to access the data, wherein a type of data tag assigned to the data designates which of the user profiles may access the data according to the at least one policy;
- responsive to tagging the data, modifying a data format of the data to create a modified data, wherein the modified data is stored in a different file format than a file format of the data;
- encrypting the data responsive to applying the at least one policy;
- wrapping the modified data in a file wrapper after encrypting the modified data;
- storing the modified data in memory,
- identifying a data access command attempting to access the modified data;
- intercepting the data access command via an audit agent;
- retrieving the at least one policy linked to the user profiles;
- and
- determining, via the at least one policy, whether one or more of the user profiles which submitted the data access command are authorized to perform the data access command.
10 more elements
Dependencies are inferred from the claim text.