SYSTEM, METHOD, AND COMPUTER PROGRAM PRODUCT FOR PREVENTING ACCESS TO DATA WITH RESPECT TO A DATA ACCESS ATTEMPT ASSOCIATED WITH A REMOTE DATA SHARING SESSION

• US 20180129818A1
• Filed: 01/04/2018
• Published: 05/10/2018
• Est. Priority Date: 09/05/2007
• Status: Active Grant

• Current Assignee: McAfee, LLC
• Original Assignee: McAfee, LLC
• Inventors: Chebiyyam, Gopi Krishna, Basavapatna, Prasanna Ganapathi
• Granted Patent: US 11,645,404 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6272 by registering files or documents with a third party
• CPC Class Codes: H04L 63/0245 Filtering by information in the payload
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection

Abstract

A system, method, and computer program product are provided for preventing access to data associated with a data access attempt. In use, a data access attempt associated with a remote data sharing session is identified. Further, access to the data is prevented.

Claims

1. A machine-readable medium, on which are stored instructions, comprising instructions that when executed cause a machine to:

detect a request to access data;

determine whether the data has a predetermined fingerprint associated with one or more applications;

identify an application associated with the request; and

determine whether to allow the request based on the predetermined fingerprint and the identified application.

2. The machine-readable medium of claim 1, wherein the request includes an identifier of an application that issued the request.

3. The machine-readable medium of claim 1, wherein the instructions that when executed cause the machine to determine whether the data has a predetermined fingerprint associated with one or more applications comprise instructions that when executed cause the machine to:

lookup a fingerprint of the data in a database of predetermined fingerprints.

4. The machine-readable medium of claim 3, wherein the database comprises fingerprints and applications associated with the fingerprints that are allowed to access the data.

5. The machine-readable medium of claim 3, wherein the database comprises fingerprints and applications associated with the fingerprints that are not allowed to access the data.

6. The machine-readable medium of claim 3, wherein the database comprises an identification of a dedicated application that is allowed to access any data.

7. The machine-readable medium of claim 1, wherein the instructions that when executed cause the machine to determine whether to allow the request comprise instructions that when executed cause the machine to:

determine whether a remote desktop sharing session is in operation; and

prevent initiation of the identified application responsive to the determination.

8. A machine-readable medium, on which are stored instructions, comprising instructions that when executed cause a machine to:

determine whether remote data sharing is currently enabled;

identify a fingerprint of data to which access is requested, responsive to a determination that remote data sharing is currently enabled; and

determine whether to allow access to the data responsive to a match of the fingerprint with a predetermined fingerprint.

9. The machine-readable medium of claim 8, wherein the instructions that when executed cause the machine to determine whether remote data sharing is currently enabled comprise instructions that when executed cause the machine to determine whether a remote data sharing application is executing.

10. The machine-readable medium of claim 8, wherein the instructions that when executed cause the machine to identify a fingerprint of data to which access is requested comprise instructions that when executed cause the machine to hash the data.

11. The machine-readable medium of claim 8, wherein the instructions that when executed cause the machine to identify a fingerprint of data to which access is requested comprise instructions that when executed cause the machine to calculate a value of the data utilizing a predetermined algorithm.

12. The machine-readable medium of claim 8, wherein the instructions that when executed cause the machine to determine whether to allow access to the data comprise instructions that when executed cause the machine to lookup a fingerprint of the data in a database of predetermined fingerprints of data.

13. The machine-readable medium of claim 12, wherein the database is stored remotely to the machine.

14. The machine-readable medium of claim 8, wherein the instructions further comprise instructions that when executed cause the machine to close data already opened prior to enablement of a remote desktop sharing session.

15. A method for preventing data loss by determining whether to allow a request to access data, comprising:

detecting, by a computer system, a request to access data;

determining, by the computer system, whether the data has a predetermined fingerprint associated with one or more applications;

identifying, by the computer system, an application associated with the request; and

determining, by the computer system, whether to allow the request based on the predetermined fingerprint and the identified application.

16. The method of claim 15, wherein determining, by the computer system, whether the data has a predetermined fingerprint associated with one or more applications comprises:

looking up a fingerprint of the data in a database of predetermined fingerprints and applications associated with the predetermined fingerprints.

17. The method of claim 16, wherein determining, by the computer system, whether the data has a predetermined fingerprint associated with one or more applications further comprises:

determining whether an application request access to the data is a dedicated application allowed to access any data.

18. A method for preventing data loss by determining whether to allow access to data, comprising:

determining, by a computer system, whether remote data sharing is currently enabled;

identifying, by the computer system, a fingerprint of data to which access is requested, responsive to a determination that remote data sharing is currently enabled; and

determining, by the computer system, whether to allow access to the data responsive to a match of the fingerprint with a predetermined fingerprint.

19. The method of claim 18, wherein determining, by the computer system, whether to allow access to the data comprises looking up a fingerprint of the data in database of predetermined fingerprints of data stored remotely to the computer system.

20. The method of claim 18, further comprising:

determining, by the computer system, that the data was opened prior to enablement of the remote data sharing session; and

closing, by the computer system, the data in response to a request to initiate the remote data sharing session.