Back to results
US 9,286,486 B2Granted
System and method for copying files between encrypted and unencrypted data storage devices
AssigneeKaspersky Lab AO
InventorsEvgeniya P. Kirikova, Alexander N. Makarov, Damir R. Shiyafetdinov
Life of this patent
Estimating the term…
Abstract
Disclosed are systems, methods and computer program products for copying encrypted and unencrypted files between data storage devices. In one aspect, the system detects a request to copy a file from a first data storage device to a second data storage device, determines one or more parameters of the copied file, the first data storage device and the second data storage device, selects, based on the one or more parameters, a file encryption policy for the copies file, and applies the selected encryption policy to the copied file.
Claims18
A method for copying files between data storage devices, the method comprising:
- detecting, by a hardware processor, a request to copy a file from a first data storage device to a second data storage device, wherein all contents of a memory of at least one of the first and second data storage devices are encrypted as a whole using a Full Disk Encryption (FDE);
- determining, by the hardware processor, one or more parameters of each of the file being copied, the first data storage device and the second data storage device, wherein the one or more parameters of the file comprise metadata of the file including an indicator of access rights to the file, a type of the file, a size of the file, an owner of the file, and a check sum of the file;
- selecting, by the hardware processor, a file encryption policy from a plurality of file encryption policies for the file being copied, based on the one or more parameters of each of the file being copied, the first data storage device and the second data storage device and based on a disk encryption policy of at least one of the first data storage device and the second data storage device, wherein the plurality of file encryption policies are configured to define access rights of the file being copied based at least in part on a current encryption status of the file being copied and each respective encryption policy of the first and second data storage devices;
- and
- applying, by the hardware processor, the selected file encryption policy to the file being copied.
2 more elements
A system for copying files between data storage devices, the system comprising:
- a memory;
- a hardware processor configured to execute instructions stored in the memory, causing the system to:
- detect a request to copy a file from a first data storage device to a second data storage device, wherein all contents of a memory of at least one of the first and second data storage devices are encrypted as a whole using a Full Disk Encryption (FDE);
- determine one or more parameters of each of the file being copied, the first data storage device and the second data storage device, wherein the one or more parameters of the file comprise metadata of the file including an indicator of access rights to the file, a type of the file, a size of the file, an owner of the file, and a check sum of the file;
- select, a file encryption policy from a plurality of file encryption policies for the file being copied, based on the one or more parameters of each of the file being copied, the first data storage device and the second data storage device and based on a disk encryption policy of at least one of the first data storage device and the second data storage device, wherein the plurality of file encryption policies are configured to define access rights of the file being copied based at least in part on a current encryption status of the file being copied and each respective encryption policy of the first and second data storage devices;
- and
- apply the selected file encryption policy to the file being copied.
4 more elements
A computer program product stored on a non-transitory computer-readable storage medium, the computer program product comprising computer-executable instructions for copying files between data storage devices, including instructions for:
- detecting a request to copy a file from a first data storage device to a second data storage device, wherein all contents of a memory of at least one of the first and second data storage devices are encrypted as a whole using a Full Disk Encryption (FDE);
- determining one or more parameters of each of the file being copied, the first data storage device and the second data storage device, wherein the one or more parameters of the file comprise metadata of the file including an indicator of access rights to the file, a type of the file, a size of the file, an owner of the file, and a check sum of the file;
- selecting, a file encryption policy from a plurality of file encryption policies for the file being copied, based on the one or more parameters of each of the file being copied, the first data storage device and the second data storage device and based on a disk encryption policy of at least one of the first data storage device and the second data storage device, wherein the plurality of file encryption policies are configured to define access rights of the file being copied based at least in part on a current encryption status of the file being copied and each respective encryption policy of the first and second data storage devices;
- and
- applying the selected file encryption policy to the file being copied.
2 more elements
Dependencies are inferred from the claim text.