The subject matter, which is regarded as the invention is particularly pointed out and distinctly claimed in the claims at the conclusion of the specification. The foregoing and other objects, features, and advantages of the invention are apparent from the following detailed description taken in conjunction with the accompanying drawing in which:
The detailed description explains the preferred embodiments of the invention, together with advantages and features, by way of example with reference to the drawings.
Referring to
The computer 20 includes a monitor 22, the monitor 22 accepts video signals representing information from the computer 20 and displays the information represented by the video signals on the monitor 22. The computer 20 further includes a central processing unit 24, which interprets and executes instructions. The monitor 22 is operably coupled to the central processing unit 24. The computer 20 further includes a mass storage sector 26 (e.g., hard drive, RAM). The mass storage sector 26 is the portion of the computer 20 that is configured for storing and preserving data for later retrieval. Further included with the computer 20 are a keyboard 30 and a mouse 32. The keyboard is operably coupled to the central processing unit 24 and used to enter text or data into the computer 20, the entered text and data is displayed on the monitor 22. The mouse 32 is a hand-held button activated input device that controls the movement of an indicator displayed on the monitor 22. The mouse 32 allows the user of the system to select operations or manipulate text or graphics associated with the computer 20. Similar to the keyboard 30, the mouse 32 is operably coupled to the central processing unit 24.
Referring to
The target file name is the name of the file to be protected. The process name is the name of the processes (applications and users) to be given file access. The file access permission is the level of access granted to the processes (applications and users). The file access permission is governed by at least one of the following rules of access, (a) manage, (b) write, (c) delete, and (d) write and delete. File access permissions on a particular file can be altered at any point by any user with manage permission set on that file, or by any trusted application if the file does not have any access restrictions. The user or an application having write permission set on the file may add content by writing to the file. Delete permission allows the user or an application to have deletion capabilities with the particular file. The service application 60 is configured to enforce the file rules of access.
The service application 60 may be configured to re-initiate when an unauthorized user attempts to disable the service application 60. Furthermore, the service application 60 may be configured to initiate a second service application 68 when an unauthorized user attempts to disable the original service application 60, such that the second service application 68 protects the set of files from malicious alteration and deletion.
While the preferred embodiment to the invention has been described, it will be understood that those skilled in the art, both now and in the future, may make various improvements and enhancements which fall within the scope of the claims which follow. These claims should be construed to maintain the proper protection for the invention first described.