US 11,822,699 B1 · Preventing surreptitious access to file data by malware

Abstract

The various implementations described herein include methods and devices for preventing unauthorized access to files and networks. In one aspect, a method includes installing a first application at a computing device, the first application designated as writing to user files. Installing the first application includes: (i) storing application data files for the first application within a first portion of the memory, where files stored in the first portion are designated as read-only for the first application; and (ii) allocating a second portion of the memory for user data files to be used by the first application. The method further includes installing a second application at the computing device, the second application designated as writing to application data files. Installing the second application includes: (i) allocating a third portion of the memory for prototype writable application data files; and (ii) allocating a fourth portion of the memory for network-based data access.

Claims20

Dependent claims

A method of preventing unauthorized access to data files, performed at a computing device having one or more processors and memory storing one or more programs configured for execution by the one or more processors, the method comprising:

installing a first application at the computing device, the first application designated as writing to user files, wherein installing the first application comprises:
storing application data files for the first application within a first portion of the memory, wherein files stored in the first portion are designated as read-only for the first application;
and
allocating a second portion of the memory for user data files to be used by the first application;
and
installing a second application at the computing device, the second application designated as writing to application data files, wherein installing the second application comprises:
allocating a third portion of the memory for prototype writable application data files;
and
allocating a fourth portion of the memory for network-based data access.

6 more elements

A computing device, comprising:

one or more processors;
memory;
and
one or more programs stored in the memory and configured for execution by the one or more processors, the one or more programs comprising instructions for:
installing a first application at the computing device, the first application designated as writing to user files, wherein installing the first application comprises:
storing application data files for the first application within a first portion of the memory, wherein files stored in the first portion are designated as read-only for the first application;
and
allocating a second portion of the memory for user data files to be used by the first application;
and
installing a second application at the computing device, the second application designated as writing to application data files, wherein installing the second application comprises:
allocating a third portion of the memory for prototype writable application data files;
and
allocating a fourth portion of the memory for network-based data access.

10 more elements

Dependencies are inferred from the claim text.

Preventing surreptitious access to file data by malware

Life of this patent

Preventing surreptitious access to file data by malware

Life of this patent

Abstract

Claims20