# US 8,788,723 B1 · System and apparatus for controlling use of mass storage devices > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 8,788,723 B1 - Document ID: US8788723B1 - Status: Granted - Kind: B1 - Application number: 12/156,664 - Filed: 2008-06-02 - Granted: 2014-07-22 - Earliest claimed: 2007-06-01 - Applicants: Robert F. Hogan; A. Christian Jackson; Linda Stilwell - Inventors: Robert F. Hogan; Larry R. Stilwell; A. Christian Jackson - Web page: https://patentgrep.com/patent/US8788723B1 ## CPC - G06F 13/38: Information transfer, e.g. on bus (G06F13/14 takes precedence) - G06F 13/382: {using universal interface adapter} - G06F 17/00: Digital computing or data processing equipment or methods, specially adapted for specific functions (information retrieval, database structures or file system structures therefor G06F16/00) - G06F 21/00: Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity - G06F 21/85: interconnection devices, e.g. bus-connected or in-line devices - G06F 3/0631: {by allocating resources to storage systems} - G06F 3/0632: {by initialisation or re-initialisation of storage systems} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Disclosed is a software program, USB monitoring software agent. USB monitoring software agent is a software program that monitors all USB ports of a computer and provides real-time detection of all USB devices connected to a USB port. As a USB device is detected, the device is identified, categorized, catalogued and logged in a secure persistent store, prompted for a challenge policy of use if so configured, prevent the USB device from being used if so configured, transmit information about the detected USB device to a local or remote repository by a selected industry standard telecommunication method. ## Claims ### Claim 1 A method of monitoring the use of mass storage devices connected to a computer Universal Serial Bus (USB) port comprising the steps of: detecting the presence of a mass storage device connected to a computer USB port; creating a unique session identifier; displaying a mass storage device policy statement on a monitor of the computer setting forth mass storage device user conditions; prompting a computer user to respond to the policy statement by accepting or declining the statement; and controlling the mass storage devices access to the computer's operating system by permitting access if the user accepts the policy statement or preventing access if the user declines the policy statement, wherein the unique session identifier comprises a combination of the mass storage device type, mass storage device serial number, date and time of mass storage device computer access attempt and the computer operating system assigned drive letter designation for the computer port to which the mass storage device is attached. ### Claim 2 (depends on 1) The method of claim 1 further comprising: identifying a serial number of a detected mass storage device. ### Claim 3 (depends on 2) The method of claim 2 further comprises storing the serial number in a database. ### Claim 4 (depends on 3) The method of claim 3 wherein the database is a remote database to which the serial number information is transmitted. ### Claim 5 (depends on 2) The method of claim 2 wherein the database is encrypted. ### Claim 6 (depends on 1) The method of claim 1 further comprising the steps of: providing a USB monitoring software agent in the computer for tracking files read from, or written to, the mass storage device; allowing the mass storage device to read and/or write files located in the computer after the policy statement is accepted by the computer user; and tracking files read from, or written to, the mass storage device. ### Claim 7 (depends on 6) The method of claim 6 further comprising the step of storing file information about files read from, or written to, the mass storage device in a database. ### Claim 8 (depends on 7) The method of claim 7 wherein the database is a remote database to which the file information is transmitted. ### Claim 9 (depends on 8) The method of claim 8 wherein the file information is transmitted by a secure or un-secure network communication link. ### Claim 10 (depends on 7) The method of claim 7 wherein the database is encrypted. ### Claim 11 (depends on 1) The method of claim 1 further comprising the step of preventing the mass storage device from being used by the computer operating system when the computer user declines the policy statement. ### Claim 12 (depends on 11) The method of claim 11 further comprising the step of removing the mass storage device from the operating system's known hardware devices to disable use of the mass storage device with the computer. ### Claim 13 (depends on 1) The method of claim 1 wherein the unique session identifier further comprises a designation for the type of access event. ### Claim 14 (depends on 1) The method of claim 1 further comprising creating a log event wherein the unique session identifier is recorded in the log event.