Data Loss Prevention for Wireless File Transfers

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Traditional systems for enforcing data loss prevention policies are ineffective in preventing sensitive data from being transferred via wireless protocols, as these protocols can be difficult to stop once initiated, especially across devices like smartphones and tablets.

Innovation Solution

A computer-implemented method and system that identifies applications capable of wireless data transfer, monitors file system access, and analyzes files to determine if transferring data violates data loss prevention policies, with the capability to prevent or encrypt file transfers if policies are breached.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional data loss prevention systems are used, then email and removable media transfers are prevented, but wireless protocol transfers cannot be stopped

Engineering Contradiction:

Improvedata loss prevention effectivenessVSAvoidcoverage of transfer protocols

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The system performs preliminary actions by monitoring file system access patterns and detecting transfer initiations before actual data transmission occurs. By examining file access requests and analyzing file contents in advance, the system can identify potential policy violations and block transfers proactively, preventing data loss before it happens through wireless protocols.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system introduces an intermediary monitoring component that sits between the application/file system and the wireless transfer protocol. This intermediary layer captures file access requests, analyzes them against security policies, and controls whether the transfer proceeds, thereby extending data loss prevention coverage to wireless protocols without disrupting legitimate transfers.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Ease of operation

If wireless data transfer is allowed, then device connectivity and data sharing are enabled, but sensitive data can be transferred to inappropriate devices

Engineering Contradiction:

Improvewireless data transfer capabilityVSAvoiddata exposure risk

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The system implements feedback by continuously monitoring file access patterns during wireless connections and analyzing transferred files in real-time. When a file access request is detected during an active wireless connection, the system analyzes the file content, compares it against security policies, and provides immediate feedback by either allowing or blocking the transfer based on the policy evaluation.

Inventive Principle:

Principle #23Feedback

Solution Approach 2:

The system applies local quality by implementing selective monitoring and analysis only for files accessed during active wireless connections. Rather than blocking all wireless transfers uniformly, the system examines specific file access requests and applies policy-based decisions to individual files, allowing legitimate transfers while blocking those containing sensitive data.

Inventive Principle:

Principle #3Local quality

3Reliability

If file transfers are monitored in real-time, then data loss can be prevented, but system performance and transfer speed are reduced

Engineering Contradiction:

Improvepolicy enforcement accuracyVSAvoiddata transfer speed

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The system applies partial action by monitoring only file system access requests that occur during active wireless connections, rather than all file operations. Additionally, analysis is performed selectively based on detected access patterns, examining only those files that show indicators of potential transfer attempts, thereby reducing the overall monitoring burden while maintaining effective policy enforcement.

Inventive Principle:

Principle #16Partial or excessive action

Solution Approach 2:

The system implements skipping by rapidly analyzing file contents using efficient scanning techniques and heuristics. When a file access request is detected during a wireless connection, the system quickly evaluates the file against security policies and makes a rapid allow/block decision, minimizing the time added to the transfer process while maintaining accurate policy enforcement.

Inventive Principle:

Principle #21Skipping (Rushing through)

Data Source

PatentUS10547531B2Systems and methods for enforcing data loss prevention policies

Publication Date: 2020.01.28 CA TECH INC

AI summary

The disclosed computer-implemented method for enforcing data loss prevention policies may include (i) identifying an application installed on the computing device, where the computing device is capable of transmitting data to other computing devices via a wireless technology standard for exchanging data over short distances, (ii) examining the application for a module that indicates that the application is capable of transferring files via the wireless technology standard, (iii) monitoring for initiations of connections via the wireless technology standard by the application, (iv) monitoring, in response to detecting an initiation of a connection via the wireless technology standard by the application, file system access by the application, (v) determining that the application is attempting to open a file, and (vi) analyzing the file to determine if transferring the file via the wireless technology standard violates a data loss prevention policy. Various other methods, systems, and computer-readable media are also disclosed.