Local data protection system
AssigneeNamusoft Co., Ltd
InventorsJong Hyun Woo, Mineui Hong, Hyo Dong Kim, Yu Seon Choi, Bong Chan Kim, Sin Ae Kim, Young Il Shin, Jea Yeon Kim, Jae Choon Cho, Sang Yong Kim
Life of this patent
Estimating the term…
Abstract
According to one aspect of the present invention, there is provided a local data protection system including a data protection agent program installed on a local computing device, which, in accordance with a preset security policy, directs storage of data files stored on the local computing device to a security area, and performs predetermined data protection functions to prevent data in storage from being leaked, lost, stolen or otherwise compromised.
Claims3
A local data protection system comprising a data protection agent program installed on a local computing device that performs predetermined data protection functions in accordance with a preset security policy,
- wherein:
- a file requested to be opened is a file stored in either a secure storage area or a non-secure storage area of the local computing device;
- when there is a request to open a file stored on the local computing device having an extension designated as secure according to the security policy, the data protection agent program provides a real file that can be read and written if the file requested to be opened is a file stored in a secure storage area of the local computing device, and the data protection agent program provides a real file with a read-only file attribute that can only be read if the file requested to be opened is a file stored in a non-secure storage area of the local computing device;
- a fake file of read-only file attribute is generated and provided that can only be read when the open requested file is a file stored in a secure storage area of the local computing device and the read request program is a program not stored with the security program;
- and
- the fake file has a same file size as the real file but is filled with null values or meaningless values.
A local data protection system comprising a data protection agent program installed on the local computing device performing predetermined data protection functions in accordance with a preset security policy,
- wherein:
- the data protection agent program prohibits creation, modification, deletion of executable files of a secure program stored and executed on the local computing device, and prohibits copying of files from a secure storage area to a non-secure storage area, prohibits copying to the clipboard, prohibits printing output, and prohibits transferring files over a network;
- a file requested to be opened is a file stored in either a secure storage area or a non-secure storage area of the local computing device;
- the data protection agent program provides a real file with a read-only file attribute that is readable only if the open requested file is a file stored in a non-secure storage area of the local computing device;
- when there is an open request for a file stored on the local computing device having an extension designated as secure in accordance with the security policy, and the open requested program is designated as a secure program under the security policy, the data protection agent program provides a real file with a read-only file attribute that is readable only if the open requested file is a file stored in a non-secure storage area of the local computing device;
- and
- when the open requested program is a program not designated as a secure program, the data protection agent program generates and provides in real time a fake file of read-only file attribute that can only be read when the open requested file is a file stored in a secure storage area of the local computing device;
- and
- the fake file has a same file size as the real file but is filled with null values or meaningless values.
A local data protection system comprising a data protection agent program installed on a local computing device that performs predetermined data protection functions in accordance with a preset security policy,
- wherein the data protection agent program provides a real file that is readable and writable if the open requested file is a file stored in a secure storage area of the local computing device, and the data protection agent program provides a real file with a read-only file attribute that is readable only if the open requested file is a file stored in a non-secure storage area of the local computing device, in response to an open request for a file stored on the local computing device having an extension designated as secure according to the security policy, when the open requested program is designated as a secure program according to the security policy.
Dependencies are inferred from the claim text.