Back to results
US 9,436,840 B2Granted
System and method for securely storing information
AssigneeSafend Ltd.
InventorsPavel Berengoltz, Hay Hazama, Dani Polovets
Life of this patent
Estimating the term…
Abstract
A system and method for storing information on a storage device. An encrypted version of the information is stored on a storage device. The information is inspected in order to determine whether it may be stored on the storage device. If the information may be stored on the storage device then the stored encrypted version is decrypted, otherwise it is deleted.
Claims17
A method comprising:
- intercepting an event of copying information from a source device, embedded in a computing system, to a destination storage device;
- determining whether or not content inspection is required for the information based on whether the storage device is removable from the computing system, wherein the determining comprises:
- if said destination storage device is a removable storage device, then determining that content inspection is required with regard to said information;
- if content inspection is required with regard to said information, then performing:
- (a) creating a storage place-holder on the destination storage device, wherein said storage place-holder is initially created empty and without holding information therein,
- wherein creating said storage place-holder on said destination storage device is performed on both (I) a file-system of the destination storage device, and (II) an operating system running on said computing system;
- (b) encrypting the information;
- (c) copying an encrypted version of said information from the source device to said destination storage device into a storage location indicated by said storage place-holder;
- (d) examining both (I) the content of the information, and (II) metadata associated with the information;
- (e) after copying said encrypted version of said information into said destination storage device, determining whether or not said information is authorized to be stored on said destination storage device,
- wherein the determining is dictated by a policy and is based on both (1) whether or not the destination storage device is removable, and (2) results of the content and metadata examination of step (d);
- (f) if said information is authorized to be stored on said destination storage device, then decrypting said encrypted version of said information which was temporarily stored at said storage place-holder in encrypted format on said destination storage device;
- (g) if the information is not authorized to be stored on said destination storage device, then deleting the encrypted version of the information that was temporarily stored at said storage place-holder on the destination storage device.
10 more elements
A system comprising:
- a hardware processor configured to perform the following operations:
- intercepting an event of copying information from a source device, embedded in a computing system, to a destination storage device;
- determining whether or not content inspection is required for the information based on whether the storage device is removable from the computing system, wherein the determining comprises:
- if said destination storage device is a removable storage device, then determining that content inspection is required with regard to said information;
- if content inspection is required with regard to said information, then performing:
- (a) creating a storage place-holder on the destination storage device, wherein said storage place-holder is initially created empty and without holding information therein,
- wherein creating said storage place-holder on said destination storage device is performed on both (I) a file-system of the destination storage device, and (II) an operating system running on said computing system;
- (b) encrypting the information;
- (c) copying an encrypted version of said information from the source device to said destination storage device into a storage location indicated by said storage place-holder;
- (d) examining both (I) the content of the information, and (II) metadata associated with the information;
- (e) after copying said encrypted version of said information into said destination storage device, determining whether or not said information is authorized to be stored on said destination storage device,
- wherein the determining is dictated by a policy and is based on both (1) whether or not the destination storage device is removable, and (2) results of the content and metadata examination of step (d);
- (f) if said information is authorized to be stored on said destination storage device, then decrypting said encrypted version of said information which was temporarily stored at said storage place-holder in encrypted format on said destination storage device;
- (g) if the information is not authorized to be stored on said destination storage device, then deleting the encrypted version of the information that was temporarily stored at said storage place-holder on the destination storage device.
11 more elements
Dependencies are inferred from the claim text.