SYSTEM FOR INTERCEPTING FILE ACCESSES AND FOR AUTOMATIC DECRYPTION AND RE-ENCRYPTION OF FILE DATA ON A PER-USE BASIS

摘要

A machine system includes bubble protection for protecting the information of certain classes of files from unauthorized access by way of unauthorized classes of programs at unauthorized periods of time. The machine system additionally may have OTF mechanism for automatic decryption of confidential file data on a peruse basis and automatic later elimination of the decrypted data by scorching and/or re-encrypting is dislosed. The system can operate within a multi-threaded environment. The machine system additionally may have a digital signature mechanism for protecting file data from unauthorized tampering. The machine system additionally may have a volume-encryption mechanism for protecting plaintext versions of file data from exposure in events of power outages.