Protection against unintentional file changing

• US 8,522,346 B1
• Filed: 08/20/2007
• Issued: 08/27/2013
• Est. Priority Date: 07/21/2000
• Status: Expired due to Fees

• Current Assignee: Scott C Harris
• Original Assignee: Scott C Harris
• Inventors: Harris, Scott C.
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): WYSZYNSKI, AUBREY H
• Application Number:
  US11/841,875
• Time in Patent Office: 2,199 Days
• Field of Search: 726/23
• US Class Current: 726/23
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2147 Locking files
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/0897 involving additional devices, e.g. trusted platform module [TPM], smartcard or USB

Abstract

Files are protected against intrusion by badly behaving programs. An embodiment may define a file association between a kind of file on an operating system, and a program which normally opens that kind of file. An operation is detected whereby another file attempts to change the file association. When that happens, a recommendation is provided to a user of whether the user should change the file association and allow said different program to open the file. One embodiment may determine if there is another program which is masquerading as said file-associated program and prevent the masquerading program from opening the file.

Claims

1. A method, comprising:

defining a file association between a kind of file on an operating system, and a first program which normally opens said file, and where said file association is stored in a list that defines which program normally opens said file;

detecting an operation whereby another file attempts to change said file association such that after said change, said file association would specify a different program, other than said first program would open said file;

providing a recommendation to a user of whether the user should change said file association to specify that said different program to open said file.

2. The method of claim 1, wherein said recommendation comprises carrying out plural different tests to determine which of a plurality of programs is the best program to open the file.

3. The method of claim 1, wherein said recommendation is based on a company who first established said kind of file as a native file format.

4. The method of claim 1, further comprising establishing a priority between programs and determining which program should open said file based on said priority.

5. The method of claim 1, further comprising allowing the user to determine whether the file association should be changed.

6. The method of claim 1, wherein said providing a recommendation comprises consulting an Internet database that includes information about programs and file formats.

7. The method of claim 1, wherein said providing a recommendation comprises determining if said recommendation is based on new hardware being added, and providing priority if said recommendation is based on new product new hardware being added.

8. The method of claim 1, wherein said providing a recommendation comprises monitoring a number of times a specified program has crashed, and making a recommendation which minimizes the number of crashes.

9. A method, comprising:

defining an association between a file on a computer, and a file-associated program that is normally used to open the file;

using an operating system running on the computer, and detecting whether a program that is attempting to open said file is actually said file-associated program, or is another program which is masquerading as said file-associated program;

allowing the file associated program to open the file; and

preventing the masquerading program from opening the file.

10. The method of claim 9, wherein said detecting comprises detecting an actual instance of a native program that is natively used to open said file.

11. The method of claim 9, wherein said detecting comprises determining a time since a user interface actuation, and preventing access if the time is greater than a specified amount.

12. A method, comprising:

in an operating system, monitoring access to files by a first program;

in said operating system, designating a first set of files as being individual to a specific user of said first program;

encrypting and decrypting said first set of programs in order to allow use of said first set of programs,

said monitoring operating for determining if said first program is attempting to obtain access to another file which has not been encrypted by said encrypting and is an unencrypted file, and where said another file is a file other than said first set of files; and

requesting a confirmation from a user of the computer prior to allowing said first program to obtain said access to said another file that is not specific to the specific user.

13. The method of claim 12, wherein said confirmation is a security alert that queries whether the user is really attempting to save contents of a buffer.

14. A method as in claim 12, wherein said operating system prevents said writing to another file without said confirmation.