Data processing system capable of securing files
AssigneeTrustview Inc.
InventorCHIEN-I LI
Life of this patent
Estimating the term…
Abstract
The invention provides a data processing system capable of securing files. The data processing system of the invention divides a data storage device into an unprotected space and a protected space. A protected application resided in an operating system is controlled by an application controlling module residing in the operating system. When the application controlling module receives a file access request information transmitted from the protected application, the application controlling module redirects the file access request information to access a plurality of protected files stored in the protected space in accordance with the file access request information, and then to return the access result of the protected files to the protected application.
Claims10
A data processing system, comprising:
- a data storage device, being divided into an unprotected space and a protected space, wherein a plurality of first protected files are stored in the protected space;
- and
- at least one processor, being coupled to the data storage device and functioning in executing an operating system, the operating system having a kernel space and a user space and including:
- an application controlling module, residing in the user space;
- a storage filtering module, residing in the kernel space and being coupled to the application controlling module;
- a file redirecting module, residing in the kernel space and being coupled to the storage filtering module;
- and
- a security driving module, residing in the kernel space and being respectively coupled to the file redirecting module and the protected space;
- wherein a protected application residing in the user space is activated and controlled by the application controlling module, when the application controlling module receives a first file access request information transmitted from the protected application, the application controlling module transmits the first file access request information and an identification information relative to the protected application to the storage filtering module, the storage filtering module transmits the first file access request information to the file redirecting module in accordance with the identification information, the file redirecting module forwards the first file access request information to the security driving module, the security driving module accesses the plurality of first protected files stored in the protected space in accordance with the first file access request information, and then returns a first access result of the first protected files to the protected application.
Dependencies are inferred from the claim text.