Systems and methods for folder and file sequestration
OwnerBret Douglas Lowryinventor
Life of this patent
Estimating the term…
Abstract
Systems and methods for providing sequestration of files and folders on a need-to-know basis based on the actions associated with file extensions and folder names by detecting whether a portable executable (PE) attempting to access a protected file or folder by use of a monitoring library is allowed to have access and taking appropriate action to allow or deny access.
Claims20
A system for providing sequestration of files and folders on a need-to-know basis based on the actions associated with file extensions and folder names, said system comprising:
- (a) monitoring, by a driver on a device, process execution of a portable executable (PE);
- (b) detecting, by monitoring library, that the PE is attempting to access a protected asset in a monitored manner;
- (c) immediate suspension of all processing for the PE in question;
- (d) intercepting, by the monitoring library the event of the action prior to the action taking place;
- (e) determining if the PE is allowed access to the file or folder in the monitored manner;
- (f) in some instances, where a PE is accessing a file in a manner whereby the system is instructed to inquire as how to handle the event, displaying a user interface to receive an input whether to take the action, or block the action;
- and
- (g) resumption or termination of the PE based on the input.
A method for providing sequestration of files and folders on a need-to-know basis based on the actions associated with file extensions and folder names, said method comprising the steps of:
- (a) monitoring, by a driver on a device, process execution of a portable executable (PE);
- (b) detecting, by monitoring library, that the PE is attempting to access a protected asset in a monitored manner;
- (c) immediate suspending of all processing for the PE in question;
- (d) intercepting, by the monitoring library the event of the action prior to the action taking place;
- (e) determining if the PE is allowed access to the file or folder in the monitored manner;
- (f) in some instances, where a PE is accessing a file in a manner whereby the system is instructed to inquire as how to handle the event, displaying a user interface to receive an input whether to take the action, or block the action;
- and
- (g) resuming or terminating of the PE based on the input.
Dependencies are inferred from the claim text.