System, method, and computer-readable medium for controlling data flow in a network

• US 20070226519A1
• Filed: 03/22/2006
• Published: 09/27/2007
• Est. Priority Date: 03/22/2006
• Status: Abandoned Application

• Current Assignee: Lower Level Software LLC
• Original Assignee: Lower Level Software LLC
• Inventors: Elbring, Christopher
• Application Number:
  US11/385,740
• Publication Number:
  US 20070226519A1
• Time in Patent Office: Days
• US Class Current: 713/190
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]

Abstract

A system, method and computer-readable medium for controlling writing of files in endpoint devices in a network are provided. In the system, a request to write a file at an endpoint of a network is intercepted and compared to predetermined criteria. If the file write request does not match any of the predetermined criteria the file write request is allowed to complete. If the file write request matches any of the predetermined criteria, a copy of the file is created and transmitted to a third party device, and at least temporarily the file write request is prevented from completing.

Claims

1. A method for controlling file writing in a network, comprising the acts of:

intercepting a request to write a file at an endpoint of the network;

comparing the file write request to predetermined criteria;

allowing completion of the file write request, if the file write request does not match any of the predetermined criteria; and

creating a copy of the file, transmitting the copy to a third party device, and at least temporarily preventing completion of the file write request, if the file write request matches any of the predetermined criteria.

2. The method of claim 1, further comprising the act of:

determining whether the file writing may continue, based upon the matching predetermined criteria.

3. The method of claim 2, further comprising the act of:

encrypting the file during the file writing.

4. The method of claim 2, further comprising the act of:

initiating a rollback process.

5. The method of claim 2, further comprising the act of:

sending a file write failure notification to a user.

6. The method of claim 2, further comprising the act of:

creating a file write failure log.

7. The method of claim 1, wherein allowing completion of the file write request comprises releasing the file write request from a cache to an operating system.

8. The method of claim 1, further comprising the acts of:

determining whether a response is received by the client from the third party device prior to reaching a timeout value; and

preventing completion of the file write request and initiating a rollback process, if the timeout value is reached.

9. The method of claim 8, further comprising the act of:

sending a file write failure notification to a user.

10. The method of claim 9, further comprising the act of:

creating a file write failure log.

11. The method of claim 1, further comprising the act of:

pre-processing the file write request prior to transmitting the copy of the file to the third party device.

12. The method of claim 1, wherein allowing completion of the file write request comprises issuing a commit command to an operating system.

13. A system for controlling writing of a file in a network, comprising:

an endpoint device including a client configured to intercept a file write request from the endpoint device, compare the request to predetermined criteria, and make and output a copy of the file if the request matches any of the predetermined criteria; and

a third party device configured to receive the copy via the network, evaluate the copy based upon the predetermined criteria, and control the file write request based upon a result of the evaluation.

14. The system of claim 13, further comprising a network directory server that interfaces with the third party device.

15. The system of claim 13, wherein the control of the file write request comprises one of allowing the file write request to complete, preventing the file write request from completing, and encrypting the file during the file writing.

16. The system of claim 15, wherein preventing the file write request from completing comprises initiating a rollback process.

17. The system of claim 16, wherein preventing the file write request from completing further comprises informing a user of a file write failure.

18. The system of claim 17, wherein preventing the file write request from completing further comprises creating a log file of the file write failure.

19. The system of claim 13, wherein the client comprises an intercept filter driver which intercepts the request and compares the request to the predetermined criteria, a redirector filter driver which creates and outputs the copy of the request, and an encryption filter driver which encrypts the file during the file writing if instructed to perform an encryption.

20. The system of claim 13, wherein the third party device comprises a communication portion and a server interface portion.

21. A computer-readable medium encoded with a computer program for controlling file writing in a network, the computer program comprising instructions for:

intercepting a request to write a file at an endpoint of the network;

comparing the file write request to predetermined criteria;

allowing completion of the file write request, if the file write request does not match any of the predetermined criteria; and

creating a copy of the file, transmitting the copy to a third party device, and at least temporarily preventing completion of the file write request, if the file write request matches any of the predetermined criteria.

22. The computer-readable medium of claim 21, the computer program further comprising instructions for:

determining whether the file writing may continue, based upon the matching predetermined criteria.

23. The computer-readable medium of claim 22, the computer program further comprising instructions for:

encrypting the file during the file writing.

24. The computer-readable medium of claim 22, the computer program further comprising instructions for:

initiating a rollback process.

25. The computer-readable medium of claim 22, the computer program further comprising instructions for:

sending a file write failure notification to a user

26. The computer-readable medium of claim 22, the computer program further comprising instructions for:

creating a file write failure log.

27. The computer-readable medium of claim 21, wherein allowing completion of the file write request comprises releasing the file write request to an operating system.

28. The computer-readable medium of claim 21, the computer program further comprising instructions for:

determining whether a response is received by the client from the third party device prior to reaching a timeout value; and

preventing completion of the file write request and initiating a rollback process, if the timeout value is reached.

29. The computer-readable medium of claim 28, the computer program further comprising instructions for:

sending a file write failure notification to a user.

30. The computer-readable medium of claim 29, the computer program further comprising instructions for:

creating a file write failure log.

31. The computer-readable medium of claim 21, the computer program further comprising instructions for:

pre-processing the file write request prior to transmitting the copy of the file to the third party device.

32. The computer-readable medium of claim 21, wherein allowing completion of the file write request comprises issuing a commit command to an operating system.

33. A method for controlling file writing in a network, comprising the acts of:

intercepting a request to write a file at an endpoint of the network;

comparing the file write request to predetermined criteria;

allowing completion of the file write request, if the file write request matches any of the predetermined criteria; and

creating a copy of the file, transmitting the copy to a third party device, and at least temporarily preventing completion of the file write request, if the file write request does not match any of the predetermined criteria.