# US 12,603,785 B2 · Root-level application selective configuration

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,603,785 B2
- Document ID: US12603785B2
- Status: Granted
- Kind: B2
- Application number: 18/586,981
- Filed: 2024-02-26
- Published: 2025-01-09
- Granted: 2026-04-14
- Earliest claimed: 2019-04-26
- Assignees: BeyondTrust Corporation
- Applicants: BeyondTrust Software, Inc.
- Inventors: Simon Fradkin; Steven Joruk
- Web page: https://patentgrep.com/patent/US12603785B2

## CPC

- G06F 16/122: {using management policies (point-in-time backing up or restoration of persistent data G06F11/1446; file migration policies for HSM systems G06F16/185)}
- H04L 9/3247: {involving digital signatures}
- G06F 8/61: Installation
- G06F 9/54: Interprogram communication
- G06F 16/137: {Hash-based (content-based indexing of textual data G06F16/31)}
- G06F 16/16: File or folder operations, e.g. details of user interfaces specifically adapted to file systems
- G06F 16/164: {File meta data generation}
- G06F 16/168: {Details of user interfaces specifically adapted to file systems, e.g. browsing and visualisation, 2d or 3d GUIs (query results presentation G06F16/156)}
- H04L 9/3271: {using challenge-response}
- H04L 63/102: {Entity profiles}
- H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)}
- H04L 67/06: specially adapted for file transfer, e.g. file transfer protocol [FTP]
- H04L 67/1097: for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

Systems and methods for root-level application selective configuration for managing performance of actions on files in a file system including an agent executed on a computing device. The agent can determine a plurality of files stored in a particular folder. The agent can receive a selection of a particular file of the plurality of files. The agent can determine whether to include an action for the particular file in a context menu based on a first policy determination. The agent can render the context menu comprising a plurality of menu entries. The plurality of menu entries can include an additional menu entry that corresponds to the action. The agent can determine whether to perform the action based on a second policy determination. The agent can cause the at least one action to be performed.

## Claims

### Claim 1

A system comprising:
an agent; and
a computing device comprising a memory and a processor, the computing device being configured to execute the agent by the processor to:
determine a plurality of files stored in a particular folder;
receive a selection of a particular file of the plurality of files;
determine whether to include an action for the particular file in a context menu based on a first policy determination;
in response to determining to include the action for the particular file as selected, render the context menu comprising a plurality of menu entries, the plurality of menu entries comprising an additional menu entry that corresponds to the action;
upon selection of the additional menu entry, determine whether to perform the action based on a second policy determination; and
in response to determining to perform the action, cause the action to be performed on the particular file at a privilege level that is higher than or lower than that of a current user account.

### Claim 2 (depends on 1)

The system of claim 1, wherein the computing device is further configured to execute the agent to:
perform the first policy determination at a first granularity; and
perform the second policy determination at a second granularity.

### Claim 3 (depends on 1)

The system of claim 1, wherein the computing device is further configured to execute the agent to determine file metadata for the particular file by querying a policy server for the file metadata.

### Claim 4 (depends on 1)

The system of claim 1, wherein the first policy determination is performed at a first level of validation and the second policy determination is performed at a second level of validation.

### Claim 5

A system comprising:
a computing device; and
an agent that, when executed by the computing device, causes the computing device to:
determine a plurality of files stored in a particular folder;
receive a selection of a particular file of the plurality of files;
determine whether to include an action for the particular file in a context menu based on at least one policy;
in response to determining to include the action for the particular file as selected, render the context menu comprising a plurality of menu entries, the plurality of menu entries comprising an additional menu entry that corresponds to the action;
upon selection of the additional menu entry, determine whether to perform the action based on the at least one policy; and
in response to determining to perform the action, cause the action to be performed on the particular file at a privilege level that is higher than or lower than that of a current user account.

### Claim 6 (depends on 5)

The system of claim 5, wherein the agent further causes the computing device to receive an indication of whether the at least one policy allows the action for the particular file from a policy server, wherein determination of whether to include the action is based on the indication.

### Claim 7 (depends on 5)

The system of claim 5, wherein the agent further causes the computing device to:
transmit a request to a policy server; and
receive the at least one policy as a policy file from the policy server.

### Claim 8 (depends on 7)

The system of claim 7, wherein the request to the policy server comprises an identifier of a current user account and a hash of the particular file.

### Claim 9 (depends on 5)

The system of claim 5, wherein the agent further causes the computing device to:
load the at least one policy from a policy server; and
store the at least one policy on a local storage device.

### Claim 10 (depends on 5)

The system of claim 5, wherein the agent further causes the computing device to:
query a policy server for a first policy file of the at least one policy at a first granularity; and
query the policy server for a second policy file of the at least one policy at a second granularity.

### Claim 11 (depends on 5)

The system of claim 5, wherein the determination whether to include the action is performed is performed at a first level of validation and the determination whether to perform the action is performed at a second level of validation.

### Claim 12

A method, comprising:
determining, via one of one or more computing devices, a plurality of files stored in a particular folder;
receiving, via one of the one or more computing devices, a selection of a particular file of the plurality of files;
determining, via one of the one or more computing devices, to include an action for the particular file in a context menu based on a first policy determination;
rendering, via one of the one or more computing devices, the context menu comprising a plurality of menu entries, the plurality of menu entries comprising an additional menu entry that corresponds to the action for the particular file that was selected receiving, via one of the one or more computing devices, a selection of the additional menu entry;
determining, via one of the one or more computing devices, to perform the action based on a second policy determination; and
causing, via one of the one or more computing devices, the action to be performed on the particular file at a privilege level that is higher than or lower than that of a current user account.

### Claim 13 (depends on 12)

The method of claim 12, wherein determining to perform the action based on the second policy determination comprises authenticating a current user account.

### Claim 14 (depends on 12)

The method of claim 12, wherein determining to perform the action based on the second policy determination comprises verifying a source of the files.

### Claim 15 (depends on 12)

The method of claim 12, wherein the first policy determination occurs at a first granularity and the second policy determination occurs at a second granularity.

### Claim 16 (depends on 12)

The method of claim 12, further comprising determining, for each of the plurality of files, a respective badge based on a third policy determination.

### Claim 17 (depends on 16)

The method of claim 16, wherein the third policy determination is performed at a first level of validation, the first policy determination is performed at a second level of validation, and the second policy determination is performed at a third level of validation.

### Claim 18 (depends on 12)

The method of claim 12, wherein the action is performed based on privileges of the agent.