Systems and Methods for Enhancing Security of Files

• US 20080244686A1
• Filed: 03/27/2007
• Published: 10/02/2008
• Est. Priority Date: 03/27/2007
• Status: Abandoned Application

• Current Assignee: Witness Systems Incorporated (Verint Systems Incorporated)
• Original Assignee: Witness Systems Incorporated (Verint Systems Incorporated)
• Inventors: Brodhagen, Kenneth Richard, Li, Qirong
• Application Number:
  US11/691,530
• Publication Number:
  US 20080244686A1
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/565 by checking file integrity
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures

Abstract

Systems and methods for enhancing security of files are provided. A representative method includes: associating information with a file, the information identifying contents of the file; monitoring the information and the file contents; detecting a lack of correlation between the information and the file; and responsive to detecting the lack of correlation, storing information corresponding to a modification of the file separately from the file.

Claims

1. A method for enhancing security of files comprising:

associating information with a file, the information identifying contents of the file;

monitoring the information and the file contents;

detecting a lack of correlation between the information and the file; and

responsive to detecting the lack of correlation, storing information corresponding to a modification of the file separately from the file.

2. The method of claim 1, wherein associating information with the file comprises coding the file with the information.

3. The method of claim 1, wherein, in storing information corresponding to the modification, the information is stored in a server located remote from the storage device used to store the file.

4. The method of claim 1, further comprising triggering an alarm responsive to detecting the lack of correlation.

5. The method of claim 4, wherein triggering the alarm comprises sending an email notification of the lack of correlation.

6. The method of claim 1, wherein coding comprises coding the file with a checksum.

7. The method of claim 6, further comprising updating the checksum responsive to an authorized modification of the file.

8. The method of claim 1, wherein the file is a configuration file.

9. The method of claim 8, wherein the configuration file is associated with a recording system for recording communications.

10. A method for enhancing security of files comprising:

coding a file of a recording system with information corresponding to contents of the file;

detecting a lack of correlation between the contents of the file and the information; and

responsive to detecting the lack of correlation;

storing information corresponding to the lack of correlation in a second storage device separate from a first storage device used to store the file; and

triggering an alarm.

11. The method of claim 10, wherein the file is a configuration file.

12. The method of claim 10, further comprising enabling a user to modify the information via a command line utility.

13. The method of claim 12, wherein further comprising enabling a user to modify the information via a user interface of the recording system.

14. A system for enhancing security of files comprising:

a recording system operative to record communications;

a coding system operative to code a file, associated with the recording system, with information corresponding to contents of the file; and

a monitoring system operative to monitor the information such that a lack of correlation between the contents and the information is detected.

15. The system of claim 14 wherein:

the file is a recording of a communication; and

the information is a checksum.

16. The system of claim 14, wherein:

the file is a recording of a communication; and

the information is a watermark, embedded in the file, comprising a digital signature unique to the file.

17. The system of claim 14, wherein the file is a configuration file of the recording system.

18. The system of claim 14, further comprising an audit system operative to record events associated with the recording system;

and

wherein responsive to the monitoring system detecting the lack of correlation, the audit system stores information corresponding to the lack of correlation being detected.

19. The system of claim 14, further comprising an alarm system, wherein responsive to the monitoring system detecting the lack of correlation, the alarm system provides a notification corresponding to the lack of correlation.

20. The system of claim 19, wherein the alarm system sends the notification as an email.