Method and apparatus for controlling access to local storage devices
View Patent ↗An approach is provided for controlling access to local storage medium. A request is detected from an operating system for accessing a local storage medium. An intermediary agent selectively grants access to the local storage medium according to an access policy, wherein the intermediary agent is distinct from the operating system.
1. A method comprising:
detecting a request from an operating system for accessing a local storage medium, the operating system being aware of all storage areas within the local storage medium and being independent of the local storage medium; and
selectively granting access, by an intermediary agent, to the local storage medium according to an access policy, wherein the intermediary agent is distinct from the operating system and is not in direct communication with the operating system.
2. A method according to claim 1 , wherein the intermediary agent is not in communication with the operating system.
3. A method according to claim 1 , further comprising:
scanning, by the intermediary agent, the local storage medium for malware.
4. A method according to claim 1 , further comprising:
tracking, by the intermediary agent, changes of data stored within the local storage medium for data recovery.
5. A method according to claim 1 , wherein the access policy specifies access for downloading of content stored within the local storage medium.
6. A method according to claim 1 , wherein the intermediary agent is a trusted agent that is a part of distributed, trusted infrastructure.
7. A method according to claim 1 , further comprising:
receiving a command from a control infrastructure, wherein the control infrastructure is a central service; and
controlling the intermediary agent in response to the command.
8. An apparatus comprising:
an intermediary agent configured to detect a request from an operating system for accessing a local storage medium, the operating system being aware of all storage areas within the local storage medium and being independent from the local storage medium, wherein the intermediary agent is further configured to selectively grant access to the local storage medium according to an access policy, the intermediary agent being distinct from the operating system and not being in direct communication with the operating system.
9. An apparatus according to claim 8 , wherein the operating system is prevented from communicating with the intermediary agent by a gatekeeper.
10. An apparatus according to claim 8 , wherein the intermediary agent includes a scanning module configured to scan the local storage medium for malware.
11. An apparatus according to claim 8 , wherein the intermediary agent includes a data recovery module configured to track changes of data stored within the local storage medium for data recovery.
12. An apparatus according to claim 8 , wherein the intermediary agent includes a content delivery module configured to control downloading of content stored within the local storage medium.
13. An apparatus according to claim 8 , wherein the intermediary agent is a trusted agent that is a part of distributed, trusted infrastructure.
14. An apparatus according to claim 8 , wherein the intermediary agent is further configured to receive a command from a control infrastructure, wherein the control infrastructure is a central service and the intermediary agent is controlled in response to the command.
15. A system comprising:
a local storage medium; and
an intermediary agent configured to detect a request from an operating system for accessing the local storage medium, the operating system being aware of all storage areas within the local storage medium and being independent from the local storage medium, wherein the intermediary agent is further configured to selectively grant access to the local storage medium according to an access policy, the intermediary agent being distinct from the operating system and not being in direct communication with the operating system.
16. A system according to claim 15 , further comprising a gatekeeper in communication between the intermediary agent and the operating system, wherein the gatekeeper prevents communications from occurring between the intermediary agent and the operating system.
17. A system according to claim 15 , wherein the intermediary agent includes a scanning module configured to scan the local storage medium for malware.
18. A system according to claim 15 , wherein the intermediary agent includes a data recovery module configured to track changes of data stored within the local storage medium for data recovery.
19. A system according to claim 15 , wherein the intermediary agent includes a content delivery module configured to control downloading of content stored within the local storage medium.
20. A system according to claim 15 , wherein the intermediary agent is a trusted agent that is a part of distributed, trusted infrastructure.
21. A system according to claim 15 , further comprising:
a policy server configured to provide the intermediary agent the access policy.
22. A system according to claim 15 , wherein the intermediary agent is either a hardware controller or a virtual machine.