Secure clipboard function

• US 20070011749A1
• Filed: 09/16/2005
• Published: 01/11/2007
• Est. Priority Date: 07/11/2005
• Status: Abandoned Application

• Current Assignee: Simdesk Technologies, Inc.
• Original Assignee: Simdesk Technologies, Inc.
• Inventors: Allison, Gary, Eaton, John, Radulovich, Mark
• Application Number:
  US11/229,146
• Publication Number:
  US 20070011749A1
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect

Abstract

Securing computer files in which a publish permission is present in a file system. Upon receiving a request to write data from one file to another, the file system determines whether publish permission is needed. If so and the user lacks the publish permission, the request is rejected. Disclosed is securing computer files which include encrypting metadata about an encrypted file and storing both the encrypted file and the encrypted metadata. The metadata includes a key for decrypting the encrypted file. The key for decrypting the metadata is stored in a USB security token. Disclosed is securing computer files which include copying material from a window displaying the contents of a file to a clipboard application. The file or window is associated with the material. The clipboard application can deny a request to paste material associated with one file to a window displaying the contents of a different file.

Claims

1. A method for securing computer files, the method comprising:

receiving, in a clipboard application, a request to copy material selected from the contents of a source file;

copying the material to the clipboard application;

receiving, in the clipboard application, a request to paste material contained in the clipboard application into a destination file;

determining if the destination file is a file authorized to receive the material;

if the destination file is authorized, pasting the material from the clipboard application to the file; and

if the destination file is not authorized, not pasting the material from the clipboard application to the file.

2. The method of claim 1, wherein each file includes a file identifier;

wherein copying the material to the clipboard application includes copying the file identifier of the source file and associating it with the copied materials; and

wherein determining if the destination file is authorized includes comparing the file identifiers of the source and destination files.

3. The method of claim 1, wherein only a single selection of material is stored in the clipboard application from a given source file.

4. The method of claim 1, wherein multiple selections of material are stored in the clipboard application from a given source file, and wherein receiving the request to paste material includes an indication of the particular selection of material to be pasted.

5. The method of claim 1, wherein each file includes security parameters including authorized user requirements determining if the destination file is authorized includes determining if the user requesting the paste meets the authorized user requirements of the source file.

6. The method of claim 5, wherein the source and destination files are different files.

7. The method of claim 1, wherein the source and destination files are the same file and the destination file is always authorized.

8. The method of claim 1, wherein the source and destination files are different files.

9. A computer-readable medium or media having computer-executable instructions for performing the method recited in any one of claims 1-8.

10. A computer system for securing computer files, the system comprising:

at least one processor unit;

at least one memory, each memory operatively coupled to a different processor unit;

at least one storage element, each storage element operatively coupled to a different processor unit; and

an application executable within the processor units and memories, the application capable of performing the method recited in any of claims 1-8.