ENFORCEMENT MITIGATIONS FOR A PROTECTED FILE

摘要

Aspects of the present invention provide the ability to enforce access methods on data based upon a policy or policies identified within the metadata of a file. The data is self-protected by including or being wrapped with one or more policy/rule identifiers that act as a form of body armor to the data when in transit or in different situations. In embodiments, access is only granted upon successful authentication and compliance with the identified policy or policies. In embodiments, depending upon the conditions and policies, varying level access may be granted. In embodiments, depending upon the conditions and policies, the system may take one or more mitigations or remedial access levels, such as containerizing, sandboxing, granting limited access, or erasing the data.

主权项

1. A computer-implemented method for accessing a file on a computing device, the method comprising:
receiving a request to access a payload of the file, the file comprising the payload in an encrypted format and metadata, the metadata comprising information related to one or more policies regarding one or more enforcement mitigations under which usable access to the payload will be granted but that mitigate security risks to the payload; using one or more components of the computing device to obtain situational data about the file that is relevant to the one or more policies; applying at least some of the situational data to the one or more policies to identify one or more enforcement mitigations that may be used to grant usable access to the payload; and granting, via the computing device, usable access to the payload using at least one of the identified enforcement mitigations.