Back to results
US 10,567,403 B2Granted
System and method for providing data and device security between external and host devices
AssigneeCUPP Computing AS
InventorShlomo Touboul
Life of this patent
Estimating the term…
Abstract
A secure data exchange system comprising a security device including a first external device plug, and a security engine operative to enforce a security policy on data transfer requests received from the host; an external device including a second external device plug; and a host including a first external device port operative to communicatively couple with the first external device plug, a second external device port operative to communicatively couple with the second external device plug, and a driver, e.g., a redirect driver, operative to transfer a data transfer request to the security device before executing the data transfer request.
Claims16
A security device, comprising:
- a host plug configured to communicatively couple with a host;
- at least one hardware processor;
- and
- memory storing:
- an operating system executable by the at least one hardware processor;
- one or more first device drivers executable by the at least one hardware processor and configured to receive a data transfer request for transferring data between the host and an external device, the external device including a storage device configured to store data, and to generate a data transfer instruction upon receiving an authorization indicator for causing execution of the data transfer request between the host and the external device;
- and
- a security system configured to receive the data transfer request from the host, the security system including a security engine and a security policy, the security engine configured to evaluate the data transfer request based on the security policy to determine whether the data transfer request satisfies the security policy, and to generate the authorization indicator when the security policy is satisfied;
- wherein the host includes:
- a first port configured to communicatively couple with the host plug;
- a second port configured to communicatively couple with the external device;
- a redirect driver configured to automatically transfer the data transfer request received by the host to the security device, before execution of the data transfer request;
- and
- one or more second device drivers configured to receive the data transfer instruction from the security device, and to cause execution of the data transfer instruction in response to receiving the data transfer instruction.
11 more elements
A method comprising:
- communicatively coupling with a host by a security device;
- executing an operating system by at least one hardware processor on the security device;
- executing one or more first device drivers on the security device by the at least one hardware processor;
- receiving by the one or more first device drivers a data transfer request from the host, the data transfer request requesting transfer of data between the host and an external device, the external device including a storage device configured to store data, the external device coupled to the host, the host including a redirect driver configured to automatically transfer to the security device the data transfer request before execution of the data transfer request, the host further including one or more second device drivers configured to receive a data transfer instruction and configured to cause execution of the data transfer instruction in response to receiving the data transfer instruction;
- receiving the data transfer request by a security engine;
- using the security engine to evaluate the data transfer request based on a security policy to determine whether the data transfer request satisfies the security policy;
- generating an authorization indicator by the security engine when the security policy is satisfied;
- and
- generating the data transfer instruction by the one or more first device drivers upon receiving the authorization indicator, the data transfer instruction for causing execution of the data transfer request between the host and the external device.
6 more elements
Dependencies are inferred from the claim text.