IP Library › Granted Patent US 11,336,628
Granted Patent B2
US 11,336,628 · App. 16/671,448 · Granted May 17, 2022

Methods and systems for securing organizational assets in a shared computing environment

Inventors: Simon Chulsky (Netanya, IL); Guy Bavly (Herzlia, IL); Assaf Litai (Tel-Aviv, IL)
Assignee: Actifile LTD
H04L63/0428G06F21/602H04L43/08
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,336,628
App. No.
16/671,448
Granted
May 17, 2022
Kind
B2
Abstract

Embodiments of the present disclosure provide methods and systems that configured to, generally, and in no particular order, perform one or more of the following functions: distinguish and identify secured assets that are permitted to an end-point to employ within a shared computing environment; monitor the end-point for certain triggering events, such as data creation, reception, manipulation, storage, or extraction associated with a secured asset; upon detection of a triggering event, monitor at least one unsecured container in order to determine if at least a portion of the secured asset has been otherwise transferred to an unsecured container; and encrypt the unsecured container in order to secure the otherwise unsecured asset.

Claims (45)

1. A method comprising:

distinguishing and identifying secured assets that are permitted to an end-point to employ within a shared computing environment;

monitoring the end-point for certain triggering events associated with a secured asset;

upon detection of a triggering event associated with the secured asset:

implementing at least one of the following: rules-based actions, controls, and alerts associated with the secured asset;

monitoring at least one unsecured container in order to determine if at least a portion of the secured asset has been otherwise transferred to an unsecured container;

encrypt the unsecured container in order to secure the otherwise unsecured asset within the unsecured container upon a determination that the unsecured container contains at least a portion of the secured asset;

classify the encrypted container as an additional secured asset by propagating a security status to a metadata associated with the encrypted container; and

continue to monitor the end-point for the certain triggering events associated with the secured asset and the additional secured asset.

2. The method of claim 1 , further comprising communicating with a plurality of secured assets at

the end-point.

3. The method of claim 1 , further comprising deploying a software component on the end-point.

4. The method of claim 3 , wherein the software component is a multi-layer software component configured to enhance data security.

5. The method of claim 4 , further comprising providing a device monitoring layer configured to monitor data use on the end-point.

6. The method of claim 4 , further comprising providing an application monitoring layer configured to monitor application use on the end-point.

7. The method of claim 4 , further comprising providing

a network monitoring layer configured to monitor network usage on the end-point.

8. The method of claim 4 , further comprising an encryption layer configured to encrypt the secured assets.

9. The method of claim 1 , further comprises accessing the secured assets in the end-point in accordance with rules implemented through a software module propagated in the shared computing environment.

10. A method comprising:

monitoring an end-point and secured assets residing within a shared computing environment on the end-point;

detecting a first action on the end-point with regard to a secured asset;

monitoring the end-point to detect an unsecured container to detect as second action;

classifying the unsecured container to create a child object to determine if at least a portion of the secured asset has been transferred to the unsecured container;

encrypt the unsecured container in order to secure the otherwise unsecured asset within the encrypted container upon a determination that the unsecured container contains at least a portion of the secured asset;

performing a predefined action in accordance to rules associated with the detected action, classification type of the secured asset, and a role of an owner of the end-point; and

propagating an inheritance security status to the child object.

11. The method of claim 10 , further comprising communicating with a plurality of secured assets at the end-point.

12. The method of claim 10 , further comprising deploying a software component on the end-point.

13. The method of claim 12 , wherein the software component is a multi-layer software component configured to enhance data security.

14. The method of claim 13 , further comprising providing a device monitoring layer configured to monitor data use on the end-point.

15. The method of claim 13 , further comprising providing an application monitoring layer configured to monitor application use on the end-point.

16. The method of claim 13 , further comprising providing a network monitoring layer configured to monitor network usage on the end-point.

17. The method of claim 13 , further comprising an encryption layer configured to encrypt the secured assets.

18. The method of claim 10 , further comprises accessing the secured assets in the end-point in accordance with rules implemented through a software module propagated in the shared computing environment.

19. A method of securing assets in a shared computing environment, the method comprising:

distinguishing secured assets that are permitted to an end-point to employ within the shared computing environment;

monitoring the end-point for certain triggering events associated with a secured asset;

implementing at least one of the following: rules-based actions, controls, and alerts associated with a secured asset in response to a triggering event;

monitoring the end-point and secured assets residing within the shared computing environment;

detecting a first action on the end-point with regard to the secured asset;

monitoring the end-point to detect an unsecured container to detect as a second action;

classifying the unsecured container to create a child object to determine if at least a portion of the secured asset has been transferred to the unsecured container;

performing a predefined action in accordance to the rules associated with the detected action, classification type of the secured asset, and a role of a owner of the end-point; and

propagating an inheritance security status to the child object.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 1, 2019
From: CHULSKY, SIMON; BAVLY, GUY; LITAI, ASSAF
To: ACTIFILE LTD.
Reel/Frame 050889/0051 →
Continuity (2)
Provisional Application 62754407 · Nov 1, 2018
Related Publication 20200145386A1 · May 7, 2020