COPY PROTECTION FOR SECURED FILES

• US 20200193034A1
• Filed: 02/27/2019
• Published: 06/18/2020
• Est. Priority Date: 05/03/2017
• Status: Active Grant

• Current Assignee: Kyndryl Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Rodriguez Bravo, Cesar Augusto, Krauss, Kirk
• Granted Patent: US 10,726,137 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: G06F 21/6272 by registering files or documents with a third party
• CPC Class Codes: G06K 19/06037 multi-dimensional coding
• CPC Class Codes: H04L 2209/08 Randomization, e.g. dummy operations or using noise
• CPC Class Codes: H04L 2209/16 Obfuscation or hiding, e.g. involving white box
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time

Abstract

Embodiments of the present disclosure relate to copy protection. A request to copy a file from a requestor with one or more privileges sufficient to access the file may be received. The file may be determined to be subject to copy protection. In response to determining that the file is subject to copy protection, a notification of the copy attempt may be transmitted. Copy protection may then be applied to the file.

Claims

1. A method comprising:

receiving, by a processor, a request to copy a file protected by superuser privileges from a requestor with superuser privileges, wherein superuser privileges include access to adjust kernel options, modify system files, modify run level, and adjust resource usage limits;

determining that the file contains one or more hashes and thus is subject to copy protection;

transmitting, in response to determining that the file is subject to copy protection, a notification of the copy attempt; and

applying copy protection to the file, wherein applying copy protection to the file includes modifying the one or more hashes to generate a dummy version of each of the one or more hashes, generating a dummy version of the file containing the dummy version of each of the one or more hashes, and transmitting the dummy version of the file to the requestor.

3. The method of claim 1, the method further comprising:

determining requestor information; and

restricting the requestor'"'"'s access based on the requestor information.

2. (canceled)

4-9. -9. (canceled)

10. A system comprising:

a memory storing program instructions;

a processor configured to execute the program instructions to perform a method comprising;

receiving a request to copy a file protected by superuser privileges from a requestor with superuser privileges, wherein superuser privileges include access to adjust kernel options, modify system files, modify run level, and adjust resource usage limits;

determining that the file contains one or more hashes and thus is subject to copy protection;

transmitting, in response to determining that the file is subject to copy protection, a notification of the copy attempt; and

applying copy protection to the file, wherein applying copy protection to the file includes modifying the one or more hashes to generate a dummy version of each of the one or more hashes, generating a dummy version of the file containing the dummy version of each of the one or more hashes, and transmitting the dummy version of the file to the requestor.

11-14. -14. (canceled)

15. A computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor to cause the processor to perform a method comprising:

receiving a request to copy a file protected by superuser privileges from a requestor with superuser privileges, wherein superuser privileges include access to adjust kernel options, modify system files, modify run level, and adjust resource usage limits;

determining that the file contains one or more hashes and thus is subject to copy protection;

transmitting, in response to determining that the file is subject to copy protection, a notification of the copy attempt; and

applying copy protection to the file, wherein applying copy protection to the file includes modifying the one or more hashes to generate a dummy version of each of the one or more hashes, generating a dummy version of the file containing the dummy version of each of the one or more hashes, and transmitting the dummy version of the file to the requestor.

16-20. -20. (canceled)