Back to results
US 9,805,218 B2Granted
Technique for data loss prevention through clipboard operations
AssigneeSymantec Corporation
InventorsSumit Manmohan Sarin, Sumant Modak, Amit Shinde, Bishnu Chaturvedi
Life of this patent
Estimating the term…
Abstract
Techniques describe preventing sensitive data from being misappropriated during a clipboard operation. A copy operation for data being copied to a clipboard is intercepted. Information describing a first application from which the data was copied is retrieved. The data and the information is stored into the clipboard. A paste operation is evaluated based on the data and the information is evaluated against a policy to determine whether the paste operation should be blocked.
Claims15
A method comprising:
- intercepting a copy operation for data being copied to a clipboard;
- retrieving information describing a first application from which the data was copied, wherein the information describing the first application includes a process ID of the first application;
- storing the data and the information into the clipboard;
- intercepting a paste operation for the data to be pasted into a second application;
- determining whether a process ID of the second application matches the process ID of the first application;
- determining whether the paste operation is user-initiated or application-initiated based on whether a system message queue describes a paste operation corresponding to the intercepted paste operation;
- determining that the data includes sensitive data based on a policy;
- and
- determining whether to block or allow the paste operation based on:
- the policy,
- whether the process ID of the second application matches the process ID of the first application, and
- whether the paste operation is user-initiated or application-initiated.
9 more elements
A non-transitory computer-readable storage medium storing instructions, which, when executed on a processor, perform an operation, the operation comprising:
- intercepting a copy operation for data being copied to a clipboard;
- retrieving information describing a first application from which the data was copied, wherein the information describing the first application includes a process ID of the first application;
- storing the data and the information into the clipboard;
- intercepting a paste operation for the data to be pasted into a second application;
- determining whether a process ID of the second application matches the process ID of the first application;
- determining whether the paste operation is user-initiated or application-initiated based on whether a system message queue describes a paste operation corresponding to the intercepted paste operation;
- determining that the data includes sensitive data based on a policy;
- and
- determining whether to block or allow the paste operation based on:
- the policy,
- whether the process ID of the second application matches the process ID of the first application, and
- whether the paste operation is user-initiated or application-initiated.
9 more elements
A system, comprising:
- a processor;
- and
- a memory storing program code, which, when executed on the processor, performs an operation,
- the operation comprising:
- intercepting a copy operation for data being copied to a clipboard,
- retrieving information describing a first application from which the data was copied,
- wherein the information describing the first application includes a process ID of the first application,
- storing the data and the information into the clipboard,
- intercepting a paste operation for the data to be pasted into a second application,
- determining whether a process ID of the second application matches the process ID of the first application,
- determining whether the paste operation is user-initiated or application-initiated based on whether a system message queue describes a paste operation corresponding to the intercepted paste operation,
- determining that the data includes sensitive data based on a policy, and
- determining whether to block or allow the paste operation based on:
- the policy;
- whether the process ID of the second application matches the process ID of the first application;
- and
- whether the paste operation is user-initiated or application-initiated.
14 more elements
Dependencies are inferred from the claim text.