Granted Patent B2

US 12,443,767 · App. 18/520,691 · Granted Oct 14, 2025

Inventors: Naveen Gopalakrishna (Bangalore, IN); Avesta Hojjati (Austin, TX)

Assignee: DigiCert, Inc.

G06F21/85G06F21/44G06F21/604

Abstract

Claims (38)

1. A method, implemented by a host machine, comprising steps of:

responsive to a peripheral device being coupled to the host machine and responsive to being granted access to data on the peripheral device, determining a presence of a change log on the peripheral device;

responsive to a lack of the presence of the change log on the peripheral device, preventing access to the peripheral device;

responsive to the presence of the change log on the peripheral device, allowing access to the peripheral device based on the change log; and

subsequent to the allowing access, writing updates to the change log based on one or more actions performed on the data on the peripheral device, wherein the updates are persisted to the change log stored on the peripheral device.

2. The method of claim 1 , wherein the allowing access to the peripheral device based on the change log includes:

examining a history of the peripheral device from the change log and providing the access responsive to the peripheral device not having been used with unauthorized host machines.

3. The method of claim 1 , wherein the steps further include:

prior to being granted access to the data on the peripheral device, performing authentication between the host device and the peripheral device.

4. The method of claim 3 , wherein the authentication includes:

examining a certificate of the peripheral device and performing the authentication based thereon.

5. The method of claim 1 , wherein the peripheral device is a memory device.

6. The method of claim 5 , wherein the peripheral device includes specialized memory for storing the change log such that the change log is persisted in the specialized memory of the peripheral device.

7. The method of claim 5 , wherein the host machine is prevented from formatting a partition with the change log or deleting the change log.

8. The method of claim 1 , wherein the change log includes a plurality of a log number, a Media Access Control (MAC) address or other identifier of any host machines to which the peripheral device has been connected, an Identification (ID) of a user, details of one or more actions performed, and a date and time when the one or more actions were performed.

9. A non-transitory computer-readable medium comprising instructions that, when executed, cause one or more processors in a host machine to perform steps of:

responsive to a peripheral device being coupled to the host machine and responsive to being granted access to data on the peripheral device, determining a presence of a change log on the peripheral device;

responsive to a lack of the presence of the change log on the peripheral device, preventing access to the peripheral device;

responsive to the presence of the change log on the peripheral device, allowing access to the peripheral device based on the change log; and

subsequent to the allowing access, writing updates to the change log based on one or more actions performed on the data on the peripheral device, wherein the updates are persisted to the change log stored on the peripheral device.

10. The non-transitory computer-readable medium of claim 9 , wherein the allowing access to the peripheral device based on the change log includes:

examining a history of the peripheral device from the change log and providing the access responsive to the peripheral device not having been used with unauthorized host machines.

11. The non-transitory computer-readable medium of claim 9 , wherein the steps further include:

prior to being granted access to the data on the peripheral device, performing authentication between the host device and the peripheral device.

12. The non-transitory computer-readable medium of claim 9 , wherein the peripheral device is a memory device.

13. The non-transitory computer-readable medium of claim 9 , wherein the change log includes a plurality of a log number, a Media Access Control (MAC) address or other identifier of any host machines to which the peripheral device has been connected, an Identification (ID) of a user, details of one or more actions performed, and a date and time when the one or more actions were performed.

14. A peripheral device comprising:

a communications interface configured to connect to a host machine;

memory; and

circuitry, wherein the communications interface, the memory, and the circuitry are communicatively coupled to one another, and wherein the circuitry is configured to:

responsive to the communications interface being connected to the host, grant access to data in the memory;

provide access to a change log stored on the peripheral device;

responsive to the host machine authorizing the peripheral device based on the change log, performing one or more actions with the host machine; and

write updates to the change log based on the one or more actions performed on the data on the peripheral device, wherein the updates are persisted to the change log stored on the peripheral device.

15. The peripheral device of claim 14 , wherein the circuitry is further configured to:

prior to granting access, provide a certificate stored in the memory to the host machine.

16. The peripheral device of claim 14 , wherein the change log is stored in the memory, and wherein the host machine is prevented from formatting a partition with the change log or deleting the change log.

17. The peripheral device of claim 14 , wherein the change log includes a plurality of a log number, a Media Access Control (MAC) address or other identifier of any host machines to which the peripheral device has been connected, an Identification (ID) of a user, details of one or more actions performed, and a date and time when the one or more actions were performed.

Assignments (3)

Priority Claims (1)

Continuity (1)

References Cited (13)