Securing files
AssigneeVera
InventorsPrakash Linga, Ajay Arora, Vladimir Buzuev, Maurice C. Evans
Life of this patent
Estimating the term…
Abstract
Data security access and management may require a server dedicated to monitoring document access requests and enforcing rules and policies to limit access to those who are not specifically identified as having access to the data. One example of operation may include selecting data to be protected via a user device, applying at least one policy to the data, storing the at least one policy in a data record identifying the data, modifying a data format of the data to create a modified data, and storing the modified data in memory.
Claims20
A method, comprising:
- storing at least one policy identifying data in a data record, wherein the data record is stored in a databank that is separate from a storage location where the data is stored;
- tagging the data to identify the data is to be secured, and to limit access to the data to user profiles which are assigned a right to access the data, wherein a type of data tag assigned to the data designates which of the user profiles may access the data according to the at least one policy;
- and
- responsive to tagging the data, modifying a data format of the data to create a modified data, wherein the modified data is stored in a different file format than a file format of the data;
- wherein a data access command attempting to access the data is identified;
- wherein the data access command is intercepted via an audit agent;
- wherein the at least one policy linked to the user profiles is retrieved;
- wherein a determination, via the at least one policy, of whether one or more of the user profiles which submitted the data access command are authorized to perform the data access command.
An apparatus, comprising:
- a processor;
- and
- a memory configured to store at least one policy that identifies data in a data record, wherein the data record is stored in a databank that is separate from a storage location where the data is stored;
- wherein the processor is configured to:
- tag the data to identify the data is to be secured, and to limit access to the data to user profiles which are assigned a right to access the data, wherein a type of data tag assigned to the data designates which of the user profiles may access the data according to the at least one policy;
- responsive to the data being tagged, a data format of the data is modified to create a modified data, wherein the modified data is stored in a different file format than a file format of the data;
- wherein a data access command attempting to access the data is identified;
- wherein the data access command is intercepted via an audit agent;
- wherein the at least one policy linked to the user profiles is retrieved;
- wherein a determination, via the at least one policy, of whether one or more of the user profiles which submitted the data access command are authorized to perform the data access command.
A non-transitory computer readable storage medium configured to store instructions that when executed causes a processor to perform:
- storing at least one policy identifying data in a data record, wherein the data record is stored in a databank that is separate from a storage location where the data is stored;
- tagging the data to identify the data is to be secured, and to limit access to the data to user profiles which are assigned a right to access the data, wherein a type of data tag assigned to the data designates which of the user profiles may access the data according to the at least one policy;
- and
- responsive to tagging the data, modifying a data format of the data to create a modified data, wherein the modified data is stored in a different file format than a file format of the data;
- wherein a data access command attempting to access the data is identified;
- wherein the data access command is intercepted via an audit agent;
- wherein the at least one policy linked to the user profiles is retrieved;
- wherein a determination, via the at least one policy, of whether one or more of the user profiles which submitted the data access command are authorized to perform the data access command.
Dependencies are inferred from the claim text.