IP Library Granted Patent US 11,645,404
Granted Patent B2
US 11,645,404 · App. 15/862,493 · Granted May 9, 2023

System, method, and computer program product for preventing access to data with respect to a data access attempt associated with a remote data sharing session

Inventors: Gopi Krishna Chebiyyam (Hyderabad, IN); Prasanna Ganapathi Basavapatna (Bangalore, IN)
Assignee: McAfee, LLC
G06F21/6218G06F21/6272H04L63/0245H04L63/1416
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,645,404
App. No.
15/862,493
Granted
May 9, 2023
Kind
B2
Abstract

A system, method, and computer program product are provided for preventing access to data associated with a data access attempt. In use, a data access attempt associated with a remote data sharing session is identified. Further, access to the data is prevented.

Claims (40)

1. An article of manufacture comprising instructions that, when executed, cause a machine to at least:

detect a request to access data;

hash the data to determine a first fingerprint of the data;

compare the first fingerprint of the data to a second fingerprint from a plurality of fingerprints stored in a database in association with ones of a plurality of applications, the database to indicate that at least a first application of the plurality of the applications is authorized to access the data when the first fingerprint of the data matches the second fingerprint, the second fingerprint stored in association with the at least the first application; and

determine whether to allow the request based on a comparison of: (a) a second application identifier of a second application that initiated the request and (b) a first application identifier of the at least the first application associated with the second fingerprint.

2. The article of manufacture of claim 1 , wherein the request includes the second identifier of the second application that initiated the request.

3. The article of manufacture of claim 1 , wherein the instructions are to cause the machine to determine whether the first fingerprint of the data matches the second fingerprint by:

comparing the first fingerprint of the data with the plurality of the fingerprints.

4. The article of manufacture of claim 1 , wherein the database stores ones of the plurality of the fingerprints matching the first fingerprint in association with the first application and some of the ones of the plurality of the applications to indicate that the first application and the some of the ones of the plurality of the applications are allowed to access the data.

5. The article of manufacture of claim 1 , wherein the database stores ones of the plurality of the fingerprints in association with the first application and some of the ones of the plurality of the applications to indicate that the first application and the some of the ones of the plurality of the applications are not allowed to access the data.

6. The article of manufacture of claim 1 , wherein the database includes an identification of a dedicated application that is allowed to access any data.

7. The article of manufacture of claim 1 , wherein the instructions are to cause the machine to determine whether to allow the request by:

determining whether a remote desktop sharing session is in operation; and

preventing initiation of the second application responsive to the determination.

8. An article of manufacture comprising instructions that, when executed, cause a machine to at least:

determine whether remote data sharing is enabled;

determine a first fingerprint of data to which access is requested, the determining of the first fingerprint of the data responsive to a determination that the remote data sharing is enabled, and the first fingerprint of the data determined by hashing the data; and

determine whether to allow access to the data responsive to: (a) a first match of the first fingerprint with a second fingerprint and (b) a second match of a first application identifier with a second application identifier, the first application identifier corresponding to a first application that initiated the request, and the second application identifier stored in association with the second fingerprint.

9. The article of manufacture of claim 8 , wherein the instructions are to cause the machine to determine whether the remote data sharing is currently enabled by determining whether a remote data sharing application is executing.

10. The article of manufacture of claim 8 , wherein the instructions are to cause the machine to identify the first fingerprint of the data to which the access is requested by calculating a value of the data utilizing a predetermined algorithm.

11. The article of manufacture of claim 8 , wherein the instructions are to cause the machine to determine whether to allow access to the data by accessing the second fingerprint of the data in a database of fingerprints of data.

12. The article of manufacture of claim 11 , wherein the database is stored remotely to the machine.

13. The article of manufacture of claim 8 , wherein the instructions are further to cause the machine to close the data already opened prior to enablement of a remote desktop sharing session.

14. A method for preventing data loss by determining whether to allow a request to access data, comprising:

detecting, by a computer system, a request to access data;

hashing the data to determine a first fingerprint of the data;

comparing, by the computer system, the first fingerprint of the data to a second fingerprint from a plurality of fingerprints stored in a database in association with ones of a plurality of applications, the database to indicate that at least a first application of the plurality of the applications is authorized to access the data when the first fingerprint of the data matches the second fingerprint, the second fingerprint stored in association with the at least the first application; and

determining, by the computer system, whether to allow the request based on a comparison of: (a) a second application identifier of a second application that initiated the request and (b) a first application identifier of the at least the first application associated with the second fingerprint.

15. The method of claim 14 , wherein the determining, by the computer system, of whether the first fingerprint of the data matches the second fingerprint includes:

comparing the first fingerprint of the data with the plurality of the fingerprints.

16. The method of claim 14 , wherein the determining, by the computer system, of whether to allow the request includes:

determining whether the request to access to the data is by a dedicated application allowed to access any data.

17. A method for preventing data loss by determining whether to allow access to data, comprising:

determining, by a computer system, whether remote data sharing is enabled;

determining, by the computer system, a first fingerprint of data to which access is requested, the determining of the first fingerprint of the data responsive to a determination that the remote data sharing is enabled, and the first fingerprint of the data determined by hashing the data; and

determining, by the computer system, whether to allow access to the data responsive to: (a) a first match of the first fingerprint with a second fingerprint and (b) a second match of a first application identifier with a second application identifier, the first application identifier corresponding to a first application that initiated the request, and the second application identifier stored in association with the second fingerprint.

18. The method of claim 17 , wherein the determining, by the computer system, of whether to allow the access to the data includes looking up the first fingerprint of the data in a database of fingerprints of data stored remotely to the computer system.

19. The method of claim 17 , further including:

determining, by the computer system, that the data was opened prior to enablement of the remote data sharing session; and

closing, by the computer system, the data in response to a request to initiate the remote data sharing session.

Assignments (4)
CORRECTIVE ASSIGNMENT TO CORRECT THE THE PATENT TITLES AND REMOVE DUPLICATES IN THE SCHEDULE PREVIOUSLY RECORDED AT REEL: 059354 FRAME: 0335. ASSIGNOR(S) HEREBY CONFIRMS THE ASSIGNMENT. Recorded Jun 23, 2022
From: MCAFEE, LLC
To: JPMORGAN CHASE BANK, N.A., AS ADMINISTRATIVE AGENT
Reel/Frame 060792/0307 →
SECURITY INTEREST Recorded Mar 3, 2022
From: MCAFEE, LLC
To: JPMORGAN CHASE BANK, N.A., AS ADMINISTRATIVE AGENT AND COLLATERAL AGENT
Reel/Frame 059354/0335 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 17, 2020
From: CHEBIYYAM, GOPI KRISHNA; BASAVAPATNA, PRASANNA GANAPATHI
To: MCAFEE, INC.
Reel/Frame 053244/0358 →
CHANGE OF NAME Recorded Jul 17, 2020
From: MCAFEE, INC.
To: MCAFEE, LLC
Reel/Frame 053244/0970 →
Continuity (3)
Continuation 14289859 · May 29, 2014
Continuation 11850432 · Sep 5, 2007
Related Publication 20180129818A1 · May 10, 2018