Granted Patent B2

US 12,475,223 · App. 18/622,917 · Granted Nov 18, 2025

Inventors: Wei Hong Tew (Penang, MY); Tze Ping Chan (Penang, MY); Jun Jeen Heng (Perak, MY)

Assignee: Sandisk Technologies, Inc.

G06F21/565G06F2221/034

Abstract

Claims (72)

1 . A host system comprising:

an input device configured to receive commands from a user;

storage media configured to store data files, the data files including a first subset of files designated for enhanced protection;

a communication interface configured to communicate with a first data storage device that is a separate device from the host system;

a network interface configured to communicate with a network server, and

one or more processors configured, individually or in combination, to:

initialize a connection with the first data storage device via the communication interface;

receive, from the user via the input device, a request to download a first file from the network server,

initiate downloading of the first file via the network interface; and

in response to determining that the first file is a potential risk to the host system:

pause the downloading of the first file;

transfer the first subset of files to the first data storage device; and

subsequent to transferring the first subset of files;

remove the connection with the first data storage device;

delete the first subset of files from the storage media;

complete downloading the first file;

determine that the first file is not a risk to the host system:

re-initialize the connection with the first data storage device via the communication interface; and

transfer the first subset of files from the first data storage device to the storage media.

2 . The host system of claim 1 , the one or more processors further configured, individually or in combination, to:

delete the first subset of files from the first data storage device subsequent to transferring from the first data storage device to the storage media.

3 . The host system of claim 1 , wherein determining that the first file is a potential risk comprises comparing a signature from the first file with a data store of signatures of dangerous files.

4 . The host system of claim 1 , the one or more processors further configured, individually or in combination, to:

designate a first selected file for the enhanced protection and part of the first subset of files based on a selection made by the user.

5 . The host system of claim 1 , the one or more processors further configured, individually or in combination, to:

designate a first selected file for the enhanced protection and part of the first subset of files based on a frequency of use of the first file.

6 . The host system of claim 1 , the one or more processors further configured, individually or in combination, to:

operate an artificial intelligence (AI) program to identify one or more files of the first subset of files based at least in part on importance to the user.

7 . The host system of claim 1 , wherein the first subset of files comprises a number of files that can be transferred in under 60 seconds.

8 . The host system of claim 1 , wherein the first subset of files comprises a number of files that can be transferred in under 10 seconds.

9 . The host system of claim 1 , wherein the first data storage device is an external storage drive.

10 . A method for sequestering protected data files to a separate data storage device from a host system, the method comprising:

identifying a first subset of files stored in a storage media of the host system that are designated for enhanced protection;

initializing a connection with the separate data storage device;

receiving from a user, via in input device of the host system, a request to download a first file from a network server;

initiating downloading of the first file; and

in response to determining that the first file is a potential risk to the host system:

pausing the downloading of the first file;

transferring the first subset of files to the separate data storage device; and

subsequent to transferring the first subset of files:

removing the connection with the separate data storage device;

deleting the first subset of files from the storage media;

completing downloading the first file;

determining that the first file is not a risk to the host system:

re-initializing the connection with the separate data storage device; and

transferring the first subset of files from the separate data storage device to the storage media.

11 . The method of claim 10 , further comprising:

deleting the first subset of files from the separate data storage device subsequent to transferring from the separate data storage device to the storage media.

12 . The method of claim 10 , wherein determining that the first file is a potential risk comprises comparing a signature from the first file with a data store of signatures of dangerous files.

13 . The method of claim 10 , wherein determining that the first file is a potential risk comprises operating an artificial intelligence (AI) program to identify potentially risky files.

14 . The method of claim 10 , further comprising:

subsequent to transferring the first subset of files to the separate data storage device, deleting the first subset of files from the storage media.

15 . A host system configured to sequester protected data files to a separate data storage device, the host system comprising:

means for receiving commands from a user,

means for storing data files, the data files including a first subset of files designated for an enhanced protection level;

means for communicating with a first data storage device that is a separate device from the host system, and

one or more processors configured, individually or in combination, to:

initialize a connection with the first data storage device via the communication interface;

receive, from the user via the means for receiving commands, a request to download a first file from a network server;

initiate downloading of the first file via the network interface; and

in response to determining that the first file is a potential risk to the host system:

pause the downloading of the first file;

transfer the first subset of files to the first data storage device; and

subsequent to transferring the first subset of files;

remove the connection with the first data storage device;

delete the first subset of files from the storage media;

complete downloading the first file;

determine that the first file is not a risk to the host system:

re-initialize the connection with the first data storage device via the communication interface; and

transfer the first subset of files from the first data storage device to the storage media.

16 . The host system of claim 1 , wherein the communication interface comprises a universal serial bus (USB) interface.

17 . The method of claim 10 , wherein the first data storage device is an external storage drive.

Assignments (4)

Continuity (1)

References Cited (11)