Computer program product and method for permanently storing data based on whether a device is protected with an encryption mechanism and whether data in a data structure requires encryption

• US 8,353,053 B1
• Filed: 04/14/2008
• Issued: 01/08/2013
• Est. Priority Date: 04/14/2008
• Status: Active Grant

• Current Assignee: McAfee, LLC
• Original Assignee: McAfee, Inc. (McAfee, LLC)
• Inventors: Chebiyyam, Gopi Krishna
• Primary Examiner(s): KOSOWSKI, CAROLYN M
• Application Number:
  US12/102,526
• Time in Patent Office: 1,730 Days
• Field of Search: 726/30
• US Class Current: 726/30
• CPC Class Codes: G06F 21/72 in cryptographic circuits
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption

Abstract

A data loss prevention system, method, and computer program product are provided for determining whether a device is protected with an encryption mechanism before storing data thereon. In operation, data to be stored on a device is identified. Additionally, it is determined whether the device is protected with an encryption mechanism. Furthermore, there is conditional reaction, based on the determination.

Claims

1. A computer program product embodied on a non-transitory computer readable medium, comprising computer executable instructions stored thereon to cause one or more processors to:

identify data to be permanently stored on a device;

determine the device is to be protected with an encryption mechanism;

determine the data is not eligible for permanent storage on the device, based on whether a data structure associated with the data requires encryption of the data;

obtain a token, based on the data not being eligible for permanent storage on the device;

use the encryption mechanism to encrypt the data; and

temporarily store the encrypted data on the device based on the token.

2. The computer program product of claim 1, wherein the device includes a mobile device.

3. The computer program product of claim 1, wherein the encryption mechanism encrypts the data on the device.

4. The computer program product of claim 3, wherein the encryption mechanism requires a user to log-in, and decrypts the data in response to the log-in.

5. The computer program product of claim 1, wherein the instructions to cause one or more processors to determine the data is not eligible for permanent storage on the device comprise instructions to cause one or more processors to use a policy.

6. The computer program product of claim 5, wherein the policy is configurable.

7. The computer program product of claim 1, wherein the instructions to cause one or more processors to determine the data is not eligible for permanent storage on the device comprise instructions to cause one or more processors to use a data structure associated with the data.

8. The computer program product of claim 1, wherein the instructions to cause one or more processors to identify the data comprise instructions executed in response to a request to store data from a remote location.

9. The computer program product of claim 1, wherein the instructions to cause one or more processors to identify the data comprise instructions executed in response to a request to store data at a remote location.

10. The computer program product of claim 1, wherein the instructions to cause one or more processors to determine the device is protected with an encryption mechanism comprise instructions performed by an agent running on the device.

11. The computer program product of claim 1, further comprising instructions to cause one or more processors to display a message utilizing the device.

12. The computer program product of claim 1, further comprising instructions to cause one or more processors to send a message to an administrator.

13. The computer program product of claim 1, further comprising instructions to cause one or more processors to log the act of temporarily storing the encrypted data.

14. The computer program product of claim 1, further comprising instructions to cause one or more processors to log an incident.

15. The computer program product of claim 1, further comprising instructions to cause one or more processors to send at least one event to a management platform.

16. A method, comprising:

identifying, by a first device, data to be permanently stored on a second device;

determining, by the first device, the second device is protected with an encryption mechanism;

determining, by the first device, the data is not eligible for permanent storage on the second device, based on whether a data structure associated with the data requires encryption of the data;

obtaining a token, by the first device, based on the data not being eligible for permanent storage on the second device;

using the encryption mechanism, by the first device, to encrypt the data; and

temporarily storing, by the first device, the encrypted data on the second device based on the token.

17. The method of claim 16, wherein the second device includes a mobile device.