Back to results
US 2017/0264431 A1Published application
Data security in a disconnected environment
AssigneeProtegrity Corporation
InventorUlf Mattsson
Life of this patent
Estimating the term…
Abstract
Systems and methods are provided for the detection and prevention of intrusions in data at rest systems such as file systems and web servers. The systems and methods regulate access to sensitive data with minimal dependency on a communications network. Data access is quantitatively limited to minimize the data breaches resulting from, e.g., a stolen laptop or hard drive.
Claims18
A computer-implemented method for data protection comprising:
- receiving a request at a client device from a user for access to a set of one or more data records encrypted with an encryption key and stored in a database comprising at least a plurality of data records;
- accessing by the client device a maintained count associated with the encryption key, the maintained count comprising a sum of database data records encrypted with the encryption key accessed by the user while the client device is not communicatively coupled to a security system, wherein the security system is external to the client device;
- and
- response to a determination that a sum of the maintained count and a number of records in the requested set of records exceeds a threshold stored at the client device and representing a number of records encrypted with the encryption key that the user is authorized to access while the client device is not communicatively coupled to the security system, denying the received request for access to the set of data records.
1 more element
A non-transitory computer-readable storage medium storing computer-executable instructions for data protection, the instructions comprising instructions for:
- receiving a request at a client device from a user for access to a set of one or more data records encrypted with an encryption key and stored in a database comprising at least a plurality of data records;
- accessing by the client device a maintained count associated with the encryption key, the maintained count comprising a sum of database data records encrypted with the encryption key accessed by the user while the client device is not communicatively coupled to a security system, wherein the security system is external to the client device;
- and
- response to a determination that a sum of the maintained count and a number of records in the requested set of records exceeds a threshold stored at the client device and representing a number of records encrypted with the encryption key that the user is authorized to access while the client device is not communicatively coupled to the security system, denying the received request for access to the set of data records.
1 more element
A system for data protection comprising:
- a non-transitory computer-readable storage medium storing executable computer instructions for:
- receiving a request at a client device from a user for access to a set of one or more data records encrypted with an encryption key and stored in a database comprising at least a plurality of data records;
- accessing by the client device a maintained count associated with the encryption key, the maintained count comprising a sum of database data records encrypted with the encryption key accessed by the user while the client device is not communicatively coupled to a security system, wherein the security system is external to the client device;
- and
- response to a determination that a sum of the maintained count and a number of records in the requested set of records exceeds a threshold stored at the client device and representing a number of records encrypted with the encryption key that the user is authorized to access while the client device is not communicatively coupled to the security system, denying the received request for access to the set of data records;
- and
- a processor configured to execute the instructions.
4 more elements
Dependencies are inferred from the claim text.