Back to results
US 8,898,460 B2Granted
Device enforced file level protection
AssigneeMicrosoft Corporation
InventorsDavid Abzarian, Harish S. Kulkarni, Todd L. Carpenter, Cinthya R. Urasaki
Life of this patent
Estimating the term…
Loading patent…
Loading patent…
AssigneeMicrosoft Corporation
InventorsDavid Abzarian, Harish S. Kulkarni, Todd L. Carpenter, Cinthya R. Urasaki
Estimating the term…
Described is a technology by which files that are hardware protected on a storage device, such as a USB flash drive, are managed on a host, including by integration with an existing file system. Each file maintained on a storage device is associated with a protection attribute that corresponds to that file's device hardware protection level. Requests directed towards accessing metadata or actual file data are processed based upon the protection attribute and a state of authentication, e.g., to allow or deny access, show file icons along with their level of protection, change levels, and so forth. Also described is splitting a file system file table into multiple file tables, one file table for each level of protection. Entries in the split file tables are maintained based on each file's current level; space allocation tracking entries are also maintained to track the space used by other split tables.
In a computing environment, a method comprising, associating a file maintained on a storage device with at least one of an encryption protection attribute or a write protection attribute by overloading a set of attributes to include the at least one of the encryption protection attribute or the write protection attribute, receiving a request directed towards accessing metadata or actual data of the file, and processing the request based upon the at least one of the encryption protection attribute or the write protection attribute and a state of authentication.
In a computing environment, a system comprising, a storage device that provides hardware protection with respect to file access, and an attribute mechanism configured to integrate a file system with the hardware protection of the storage device by associating a level of device hardware protection with each file maintained on the storage device by overloading a set of attributes of the file to include the at least one of an encryption protection attribute or a write protection attribute, and splitting a file system file table into at least three file tables with one file table for each level of protection, wherein entries in the at least three file tables are maintained based on each file's current level, wherein space allocation tracking entries are maintained in each file table to track space used by at least one other file table.
One or more computer-readable storage device having computer-executable instructions, which when executed perform steps, comprising:
Dependencies are inferred from the claim text.