Systems and methods for enforcing privacy in cloud security
AssigneeNortonLifeLock Inc.
InventorsIlya Sokolov, Lei Gu, Jason Holler, Tim van der Horst
Life of this patent
Estimating the term…
Abstract
A computer-implemented method for enforcing privacy in cloud security may include (i) identifying, by a computing device, a set of files in a backup process for a cloud service, (ii) determining, by the computing device, that at least one file in the set of files is a private file, (iii) modifying, by the computing device encrypting the private file, the set of files in the backup process, (iv) completing the backup process for the cloud service with the modified set of files, and (v) enforcing a security policy of the cloud service based on a scan of file hashes. Various other methods, systems, and computer-readable media are also disclosed.
Claims18
A computer-implemented method for enforcing privacy in cloud security, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising:
- identifying, by the computing device, a set of files in a backup process for a cloud service;
- determining, by the computing device, that at least one file in the set of files is a private file by classifying the set of files into private files and public files;
- modifying the set of files in the backup process to protect user privacy on the cloud service by encrypting the private file and metadata for the private file;
- completing the backup process for the cloud service with the modified set of files;
- enforcing a security policy of the cloud service based on a scan of file hashes, wherein:
- the scan of file hashes comprises a detection of malware in the scanned file hashes and an identification of a file containing the malware;
- the cloud service performs the scan on the file hashes to provide cloud-based security for the public files in the modified set of files;
- and
- encrypting the private file prevents the cloud service from accessing the private file and the metadata for the private file;
- and
- identifying a safe version of the file containing the malware.
A system for enforcing privacy in cloud security, the system comprising:
- an identification module, stored in memory, that identifies, by a computing device, a set of files in a backup process for a cloud service;
- a determination module, stored in memory, that determines, by the computing device, that at least one file in the set of files is a private file by classifying the set of files into private files and public files;
- a modification module, stored in memory, that modifies the set of files in the backup process to protect user privacy on the cloud service by encrypting the private file and metadata for the private file;
- a completion module, stored in memory, that completes the backup process for the cloud service with the modified set of files;
- an enforcement module, stored in memory, that enforces a security policy of the cloud service based on a scan of file hashes, wherein:
- the scan of file hashes comprises a detection of malware in the scanned file hashes and an identification of a file containing the malware;
- the cloud service performs the scan on the file hashes to provide cloud-based security for the public files in the modified set of files;
- encrypting the private file prevents the cloud service from accessing the private file and the metadata for the private file;
- and
- the enforcement module identifies a safe version of the file containing the malware;
- and
- at least one processor that executes the identification module, the determination module, the modification module, the completion module, and the enforcement module.
A non-transitory computer-readable medium comprising one or more computer-executable instructions that, when executed by at least one processor of a computing device, cause the computing device to:
- identify, by the computing device, a set of files in a backup process for a cloud service;
- determine, by the computing device, that at least one file in the set of files is a private file by classifying the set of files into private files and public files;
- modify the set of files in the backup process to protect user privacy on the cloud service by encrypting the private file and metadata for the private file;
- complete the backup process for the cloud service with the modified set of files;
- enforce a security policy of the cloud service based on a scan of file hashes, wherein:
- the scan of file hashes comprises a detection of malware in the scanned file hashes and an identification of a file containing the malware;
- the cloud service performs the scan on the file hashes to provide cloud-based security for the public files in the modified set of files;
- and
- encrypting the private file prevents the cloud service from accessing the private file and the metadata for the private file;
- and
- identify a safe version of the file containing the malware.
Dependencies are inferred from the claim text.