Method and system for improved data control and access

A method for detecting unusual system activity, comprising:

• logging, by a host controller of a data storage device in a computing system, a plurality of actions performed by a user of the computing system over time;
• determining, by the host controller, a user fingerprint for the user comprising of a set of usage actions based on the logged plurality of actions;
• monitoring, by the host controller, a plurality of new actions conducted using the computing device;
• detecting, by the host controller, unusual system activity based on a comparison of the plurality of new actions to the set of usage actions;
• and
• triggering, by the host controller, a notification of a threatening event in the computing system as a result of the detected unusual system activity.

A system for detecting unusual system activity, comprising:

• a computing system including a data storage device;
• the data storage device including a host controller;
• and
• the host controller configured to
• log a plurality of actions performed by a user of the computing system over time,
• determine a user fingerprint for the user comprising of a set of usage actions based on the logged plurality of actions,
• monitor a plurality of new actions conducted using the computing device,
• detect unusual system activity based on a comparison of the plurality of new actions to the set of usage actions, and
• trigger a notification of a threatening event in the computing system as a result of the detected unusual system activity.