DATA AND A COMPUTER SYSTEM PROTECTING METHOD AND DEVICE

• US 20090222907A1
• Filed: 06/14/2006
• Published: 09/03/2009
• Est. Priority Date: 06/14/2005
• Status: Abandoned Application

• Current Assignee: Safeprotect
• Original Assignee: Safeprotect
• Inventors: Guichard, Patrice
• Application Number:
  US11/917,583
• Publication Number:
  US 20090222907A1
• Time in Patent Office: Days
• US Class Current: 726/17
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00

Abstract

The process for protecting data and computer systems includes:

• • a step of installing at least one software agent on at least one user workstation,
  • a step of capturing, by the agent, information representative of effective uses of resources on the user workstation,
  • a step of transmitting remotely, by the agent, information representative of the effective uses of resources on the user workstation,
  • a step of selecting, remotely from the user workstation, authorized resources and/or prohibited resources on at least one user workstation (724, 730, 736, 742, 748) and
  • a step of transmitting to the workstation information representative of the authorized resources and/or the prohibited resources and
  • on the workstation, a step (754) of inhibiting, by the agent, the use of prohibited or non-authorized resources.

Claims

1-12. -12. (canceled)

13. A process for protecting data and computer systems, that comprises:

a step of installing at least one software agent on at least one user workstation,

a step of capturing, by said agent, information representative of effective uses of resources on said user workstation,

a step of transmitting remotely, by said agent, information representative of said effective uses of resources on said user workstation,

a step of selecting, remotely from the user workstation, authorized resources and/or prohibited resources on at least one user workstation and

a step of transmitting to said workstation information representative of said authorized resources and/or said prohibited resources and

on said workstation, a step of inhibiting, by said agent, the use of prohibited or non-authorized resources.

14. A process according to claim 13, that further comprises:

a step of processing, remotely, said information representative of effective uses of resources originating from at least one said agent, in order to provide aggregate use data,

the selection step utilizing said aggregate use data.

15. A process according to claim 13, that further comprises:

a step of transmitting, from at least one user workstation on which a software agent has been installed to a console remote from said user workstation, said information representative of effective uses of resources on said user workstation and

a step of transmitting, from said console to a server, information representative of said authorized resources and/or said prohibited resources,

the step of selecting authorized resources and/or prohibited resources on at least one user workstation being performed on said console.

16. A process according to claim 13, wherein said resources comprise access to remote sites over a worldwide computer network, the inhibition step comprising a step filtering the electronic address of each page that the user workstation tries to access, by recognizing a predefined part of this address, filtering hypertext links present in each page that said user workstation accesses and/or filtering each page that the user workstation tries to access by recognizing a predefined sequence of symbols in a description of said page.

17. A process according to claim 13, wherein said resources comprise access to computer applications, the inhibition step comprising a step recognizing computer applications that the user workstation tries to access.

18. A process according to claim 13, wherein said resources comprise access to computer resources via local computer applications, the inhibition step comprising a step recognizing a computer resource that an application of said user workstation tries to access.

19. A process according to claim 13, that further comprises a step determining the profile of at least one user workstation on which a software agent is installed, the selection step utilizing said profile in such a way that two identical workstation profiles are assigned the same resource use prohibitions.

20. A process according to claim 13, that further comprises a step determining the profile of at least one user of a user workstation on which a software agent is installed, the selection step utilizing said profile in such a way that two identical user profiles are assigned the same resource use prohibitions, the inhibition step utilizing an identification of the user of the user workstation in question.

21. A process according to claim 13, wherein said resources comprise the modification of a software executable file, the inhibition step comprising a step verifying the integrity of the executable file.

22. A process according to claim 13, wherein said resources comprise the modification of the user workstation'"'"'s system parameters, the inhibition step comprising a step recognizing attempts to access the system parameters of said user workstation.

23. A process according to claim 13, wherein said resources comprise the use of hardware resources for storage on removable media or printing of data, the inhibition step comprising a step recognizing the destination hardware for a transmission of information.

24. A device for protecting data and computer systems, that comprises:

at least one user workstation on which a software agent is installed, said agent being adapted to capture information representative of effective uses of resources on said user workstation and to inhibit the use of prohibited resources,

a step of processing said information representative of effective uses of resources originating from at least one said agent to provide aggregate use data,

a means of displaying said aggregate use data,

a means of selecting prohibited resources on at least one user workstation.