System and method for secure file access of derivative works

A method for managing access to derivative works, the method comprising the steps of:

• intercepting a system command with an access manager executing on a computing device, wherein the system command is issued from an operating system executing on the computing device;
• generating a new file signature with the access manager in response to the system command, wherein the new file signature corresponds to data to be written to a storage module in communication with the computing device and wherein the new file signature includes a plurality of piecewise signatures generated from the data to be written;
• identifying a matching file signature from a data table with the access manager, wherein:
• the data table includes a plurality of file signatures and a plurality of sets of file access rights,
• each file signature in the data table includes a plurality of piecewise signatures,
• each set of file access rights corresponds to one of the plurality of file signatures, and
• the matching file signature is identified when at least one piecewise signature from the new file signature matches one of the plurality of piecewise signatures in one of the file signatures in the data table;
• and
• assigning the set of file access rights corresponding to the matching file signature to the new file signature.

A system for managing access to derivative works on a storage module mounted in a computing device, wherein the storage module includes at least one file stored inside a file container and at least one file stored without a file container, the system comprising:

• a data table stored in the storage module, wherein the data table includes:
• a plurality of first file signatures, and
• a plurality of sets of file access rights, wherein each set of file access rights corresponds to one of the plurality of first file signatures and wherein each of the plurality of first file signatures includes a plurality of piecewise signatures;
• and
• an access manager operative on the computing device, wherein the access manager is configured to:
• receive an operating system function call from an operating system executing on the computing device,
• generate a new file signature corresponding to data to be written to the storage module in response to the operating system function call, wherein the new file signature includes a plurality of piecewise signatures corresponding to the data to be written,
• compare the new file signature to each of the plurality of first file signatures in the data table,
• generate a new file container when at least one piecewise signature from the new file signature matches one of the plurality of piecewise signatures in one of the plurality of first file signatures in the data table,
• store the data to be written and the new file signature to the storage module in the new file container, and
• assign the set of file access rights, which corresponds to the first file signature with at least one piecewise signature matching at least one piecewise signature of the new file signature, to the new file signature.