Method and apparatus for authentication of file read events
First Claim
Patent Images
1. A computerized method for distinguishing between false positive read events and true positive events of reading a file, comprising:
- monitoring access to a file stored on a data storage device by a computer system serving as a controller;
determining an amount of data read from the file during the access to the file and subsequent access to the file until a decision condition is met causing the controller to provide an indication if the access to the file is a false positive read event or a true positive read event;
wherein if the amount of data read from the file exceeds a threshold value a true positive read event indication is generated, otherwise a false positive read event indication is generated,wherein the threshold is determined according to a formula;
T=max(1,min(32,32−
16*log(K.sub.2/K)*S/K)) wherein;
T is the threshold in KB, K is the minimum size of file for which the entire file is read in KB;
K.sub.2 is the minimum size of the file for which half of the file is read in KB; and
S is the actual size of the file in KB.
1 Assignment
0 Petitions
Accused Products
Abstract
A computerized method and apparatus for distinguishing between false positive read events and true positive events of reading a file, comprising determining an amount of date read from the file, in case the amount of data exceeds a threshold generating a true positive read event, otherwise generating a false positive read event in case a decision condition is met, and an apparatus to carry out the same.
15 Citations
6 Claims
-
1. A computerized method for distinguishing between false positive read events and true positive events of reading a file, comprising:
-
monitoring access to a file stored on a data storage device by a computer system serving as a controller; determining an amount of data read from the file during the access to the file and subsequent access to the file until a decision condition is met causing the controller to provide an indication if the access to the file is a false positive read event or a true positive read event;
wherein if the amount of data read from the file exceeds a threshold value a true positive read event indication is generated, otherwise a false positive read event indication is generated,wherein the threshold is determined according to a formula; T=max(1,min(32,32−
16*log(K.sub.2/K)*S/K)) wherein;
T is the threshold in KB, K is the minimum size of file for which the entire file is read in KB;
K.sub.2 is the minimum size of the file for which half of the file is read in KB; and
S is the actual size of the file in KB. - View Dependent Claims (2, 3, 4)
-
-
5. A computerized apparatus for distinguishing between false positive read events and true positive events of reading a file, comprising:
-
a data storage device storing the file therein; and a controller linked to the data storage device, the controller configured to; monitor access to the file stored on the data storage device; determine an amount of data read from the file during the access to the file and subsequent access to the file until a decision condition is met causing the controller to provide an indication if the access to the file is a false positive read event or a true positive read event;
wherein if the amount of data read from the file exceeds a threshold value a true positive read event indication is generated, otherwise a false positive read event indication is generated,wherein the threshold is determined according to a formula; T=max(1,min(32,32−
16*log(K.sub.2/K)*S/K)) wherein;
T is the threshold in KB, K is the minimum size of file for which the entire file is read in KB;
K.sub.2 is the minimum size of the file for which half of the file is read in KB; and
S is the actual size of the file in KB. - View Dependent Claims (6)
-
Specification