System and method for providing data and device security between external and host devices
AssigneeCUPP Computing AS
InventorShlomo Touboul
Life of this patent
Estimating the term…
Abstract
A secure data exchange system comprising a security device including a first external device plug, and a security engine operative to enforce a security policy on data transfer requests received from the host; an external device including a second external device plug; and a host including a first external device port operative to communicatively couple with the first external device plug, a second external device port operative to communicatively couple with the second external device plug, and a driver, e.g., a redirect driver, operative to transfer a data transfer request to the security device before executing the data transfer request.
Claims18
A security device, comprising:
- a host plug configured to interface with a device port of a host, the host having a redirection driver;
- at least one hardware processor;
- and
- memory storing:
- an operating system executable by the at least one hardware processor,
- a security system, and
- a security manager executable by the at least one hardware processor and configured to receive a first data transfer instruction for transferring data between the host and an external storage device configured to store data, the first data transfer instruction being received from the redirection driver before the host has processed the first data transfer instruction, and to provide a proxy data transfer instruction to the redirection driver on the host upon receiving the proxy data transfer instruction from the security system,
- the security system including a security engine and a security policy, the security engine configured to receive the first data transfer instruction from the security manager, the security engine configured to evaluate the first data transfer instruction based on the security policy to determine whether the first data transfer instruction satisfies the security policy, and the security engine configured to generate the proxy data transfer instruction when the security policy is satisfied.
A method by a security device, comprising:
- coupling to a host, the host having a redirection driver;
- executing an operating system by at least one hardware processor on the security device;
- executing a security manager by the at least one hardware processor;
- receiving by the security manager a first data transfer instruction for transferring data between the host and an external storage device configured to store data, the first data transfer instruction being received from the redirection driver before the host has processed the first data transfer instruction;
- transferring the first data transfer instruction from the security manager to a security engine on the security device;
- evaluating by the security engine the first data transfer instruction based on a security policy to determine whether the first data transfer instruction satisfies the security policy;
- generating a proxy data transfer instruction when the security policy is satisfied;
- and
- providing by the security manager the proxy data transfer instruction to the redirection driver on the host upon receiving the proxy data transfer instruction from the security system.
Dependencies are inferred from the claim text.