PROTECTING SENSITIVE INFORMATION FROM A SECURE DATA STORE

• US 20100242082A1
• Filed: 03/17/2009
• Published: 09/23/2010
• Est. Priority Date: 03/17/2009
• Status: Active Grant

• Current Assignee: Sophos Limited (Sophos Group Ltd.)
• Original Assignee: Sophos Limited (Sophos Group Ltd.)
• Inventors: Keene, David P., Donley, Daryl E.
• Granted Patent: US 9,426,179 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/14 for detecting or protecting against malicious traffic
• CPC Class Codes: H04L 63/1433 Vulnerability analysis
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 12/065 Continuous authentication
• CPC Class Codes: H04W 12/088 using filters or firewalls

Abstract

In embodiments of the present invention improved capabilities are described for the steps of receiving an indication that a computer facility has access to a secure data store, causing a security parameter of a storage medium local to the computer facility to be assessed, determining if the security parameter is compliant with a security policy relating to computer access of the remote secure data store, and in response to an indication that the security parameter is non-compliant, cause the computer facility to implement an action to prevent further dissemination of information, to disable access to network communications, to implement an action to prevent further dissemination of information, and the like.

Claims

1. A computer program product embodied in a computer readable medium that, when executing on one or more computers, performs the steps of:

a. Receiving an indication that a computer facility has access to a secure data store;

b. Causing a security parameter of a storage medium local to the computer facility to be assessed;

c. Determining if the security parameter is compliant with a security policy relating to computer access of the remote secure data store;

d. In response to an indication that the security parameter is non-compliant, causing the computer facility to implement an action to prevent further dissemination of information.

2. A computer program product embodied in a computer readable medium that, when executing on one or more computers, performs the steps of:

a. Receiving an indication that a computer facility has access to a secure data store;

b. Causing a security parameter of a storage medium local to the computer facility to be assessed;

c. Determining if the security parameter is compliant with a security policy relating to computer access of the remote secure data store;

d. In response to an indication that the security parameter is non-compliant, causing the computer facility to disable access to network communications.

3. A computer program product embodied in a computer readable medium that, when executing on one or more computers, performs the steps of:

a. Receiving an indication that a computer facility has access to a secure data store;

b. Causing a security parameter relating to the computer facility to be assessed;

c. Determining if the security parameter is compliant with a security policy relating to computer access of the remote secure data store;

d. In response to an indication that the security parameter is non-compliant, causing the computer facility to implement an action to prevent further dissemination of information.