Process-level control of encrypted content

US10650154B2 · kind B2 · utility

Assignee

• Sophos Limited · GB

Inventors

• Kenneth D. Ray · Seattle, US
• Andrew J. Thomas · Woodstock, GB
• Anthony John Merry · Kessel-Lo, BE
• Harald Schütz · Linz, AT
• Andreas Berger · Therwil, CH
• John Edward Tyrone Shaw · Felton, GB

Key dates

• Filing date: Feb 12, 2016
• Grant date: May 12, 2020
• Expiry date: Mar 31, 2036

Classification

• Technology area (CPC H): Electricity
• CPC primary: H04L63/1408
• WIPO field: Computer technology
• WIPO sector: Electrical engineering

Abstract

Securing an endpoint against malicious activity includes encrypting a plurality of files on an endpoint to prevent unauthorized access to the plurality of files, receiving a request to access a file from a process executing on the endpoint, decrypting the file for the process, and monitoring a security state of the process. If the security state becomes a compromised state, a technique involves maintaining access to any open files (including the file decrypted for the process), prohibiting access to other files, and initiating a remediation of the process by facilitating a restart of the process. If the remediation is successful, access by the process to the plurality of files may be restored.