System and method for alerting on open file-share sessions assosciated with a device
A method and system for detecting an active file-share session on a monitored device associated with a client device, alerting the user of the client device, and enabling them to terminate the file-share session, are disclosed. In accordance with the disclosed method and system, when a remote device (e.g., on a network, the internet, etc.) connects to a shared file or folder on a monitored device (e.g., a personal computer, network area storage, a game console, a storage area network, a smart telephone, etc.) the user of the client device receives an immediate, automatic alert with the specifics of the file-sharing session and data affected. The user is then presented with an option of whether to OK the file-sharing session (i.e. allow data access to proceed), or to disconnect the file-share session (i.e. cause the remote user to lose access to the monitored device's shared data).
1 . A method of protecting data against unauthorized access over a network, wherein
the data is associated with an electronic device and is accessible via active file-share sessions, comprising:
determining whether there are active file-share sessions associated with said electronic device;
in the event at least one active file-share session is determined to exist, determining whether the at least one active file-share session is included on an approved share-session list;
in the event the at least one active file-share session is determined not to be on the approved share-session list, retrieving identifying information of a remote device associated with the at least one active file-share session; and
sending an alert, wherein the alert includes the identifying information of the remote device.
2 . The method of claim 1 , wherein the alert also includes an approval request providing a recipient of the alert a capability to approve or terminate the at least one active file-share session;
3 . The method of claim 2 , wherein in response to receiving an approval from said recipient, including on the approved share-session list the at least one active file share session; and
in response to receiving a denial from said recipient, terminating the at least one active file-share session.
4 . The method of claim 1 , wherein the remote device identifying information includes a name and an internet protocol (“IP”) address of the remote device.
5 . The method of claim 1 , wherein the alert includes identifying information specifying any files or folders associated with the at least one active file-share session determined not to be on the approved share-session list.
6 . The method of claim 1 , wherein the alert includes information specifying user credentials under which the data associated with the at least one active file-share session are determined not to be on the approved share-session list are accessed.
7 . The method of claim 1 , wherein the data resides externally to the electronic device.
8 . The method of claim 1 , further comprising:
in the event at least one active file-share session is determined to exist, suspending access to the at least one active file-share session;
in response to receiving an approval from said recipient, reinstating access to the at least one active file-share session.
9 . The method of claim 1 , further comprising:
recording a log of the determination and the alert presented, the log including the received denial or approval associated with the alert.
10 . The method of claim 1 , further comprising:
initiating the determination of whether there are active file-share sessions on said electronic device.
11 . The method of claim 10 , wherein the initiating step is initiated by a timer.
12 . The method of claim 11 , wherein the timer is operated at a frequency of greater than 1 cycle per second.
13 . The method of claim 10 , wherein the initiating step is invoked by an operating system on the electronic device.
14 . The method of claim 10 , wherein the initiating step is invoked upon detection of access to a file or folder associated with said electronic device.
15 . The method of claim 10 , wherein the initiating. step is invoked by an operating system on a second device associated with the data.
16 . The method of claim 15 , wherein the data resides on a network area storage device.
17 . The method of claim 7 , wherein the data resides on a mobile device.
18 . The method of claim 7 , wherein the data resides on a digital video recorder.
19 . The method of claim 7 , wherein the data resides on a gaming system.
20 . The method of claim 7 , wherein the data resides on a storage area network.
21 . The method of claim 7 , wherein the data resides on a universal-serial-bus device.
22 . A method of controlling access to data files associated with a first electronic device, wherein the data files reside on a second electronic device accessible to the first electronic device, comprising:
determining whether a third electronic device is attempting to create a file-share session associated with the second electronic device;
in the event of a determination that the third electronic device is attempting to create a file-share session, collecting identifying information of the third electronic device; and
sending an alert wherein the alert contains the identifying information and an approval request, wherein the approval request provides a recipient of the alert a capability to approve or reject the attempt to create the file-share session; and
receiving input from the recipient;
in the event the input is an approval, allowing the third electronic device to create a file-share session; and
in the event the input is a denial, terminating the attempt to create a file-share session.
23 . The method of claim 22 , further comprising: in the event the input is an approval, entering the collected identifying information of the third electronic device in an approved open share-session list, and
prior to sending an alert, determining whether the file-share session is associated with a remote device specified in the approved share-session list;
in the event the file-share session is associated with a remote device specified in the approved share-session list, allowing the third electronic device to access the file-share session.
24 . The method of claim 22 , wherein the alert is sent to a user of the first electronic device.
25 . The method of claim 22 , wherein the first electronic device is connected to the second electronic device over a network.
26 . The method of claim 22 , further comprising:
determining at least one data file affected by the file-share session; and
including a name of the at least one data file in the alert.
27 . The method of claim 22 , further comprising:
determining at least one data file folder affected by the file-share session; and
including a name of the at least one data file folder in the alert.
28 . A method of alerting a user of a primary electronic device of access to data on a monitored electronic device by a remote electronic device, comprising:
associating data on the monitored electronic device with the primary electronic device;
detecting an attempt by the remote electronic device to access the data on the monitored electronic device; and
sending an alert to the primary electronic device.
29 . The method of claim 28 ,-wherein-the step of associating the data on-the monitored device further includes authenticating the user with the monitored electronic device.
30 . The method of claim 28 , wherein the step of associating-the data further includes selecting at least some of the data on the monitored electronic device for monitoring.
31 . The method of claim 30 , wherein the selection is made by the user of the primary electronic device.
32 . The method of claim 28 , wherein the monitored electronic device contains executable code to persistently monitor data access by remote electronic devices.
33 . The method of claim 32 , wherein the monitored electronic device sends an electronic notification to the primary electronic device upon detecting an attempt.
34 . The method of claim 28 , wherein the primary electronic device electronically polls the monitored electronic device for the attempt to access the data by the remote electronic device.
35 . The method of claim 28 , wherein the alert contains at least some identifying information on the remote electronic device.
36 . The method of claim 28 , wherein the alert also includes an approval request providing a recipient of the alert a capability to approve or terminate the access to the data.
37 . The method of claim 36 , wherein in response to receiving a denial from the recipient, terminating the access to the data.
38 . The method. of claim 36 , further comprising:
in the event an attempt to access the data is detected, suspending access to the data;
in response to receiving an approval from said recipient, reinstating access to the data.