File Watcher Entity Identification for Cloud Data Loss Prevention

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Cloud storage providers face issues with unintended data deletion or modification due to user actions or nefarious software, leading to propagation of changes across multiple clients, causing accidental or malicious data loss.

Innovation Solution

Implementing a system that monitors locally stored files for deletion or modification actions, identifies the entity performing these actions, and issues notifications to users, cloud storage services, and data protection services based on predefined alert conditions to mitigate risks and prevent further synchronization of changes.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If cloud storage providers automatically synchronize data between clients, then data accessibility and collaboration are improved, but the risk of unintended deletion or modification propagation increases

Engineering Contradiction:

Improvedata accessibilityVSAvoiddeletion propagation risk

Core Design Contradiction:

Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The system performs preliminary actions by detecting deletion or modification operations on locally stored files before they are synchronized to the cloud. A file watcher monitors file system operations and identifies potentially harmful actions, allowing the system to intervene and prevent propagation before it occurs.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent introduces an intermediary component (file watcher/detection system) between the local file system and the cloud synchronization process. This intermediary detects operations on locally stored files, identifies the performing entity, and determines whether to allow or block synchronization based on predefined criteria, thus mediating between local actions and cloud propagation.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If cloud storage providers implement monitoring and notification systems, then data protection capability is improved, but system complexity increases

Engineering Contradiction:

Improvedata protection capabilityVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The system segments the data protection function into distinct modular components: a file watcher that monitors file operations, an entity identification module that determines who performed the action, an alert condition evaluation module that assesses risk, and a notification module that alerts users. This segmentation allows each component to perform its specific function independently, making the overall system more manageable and maintainable despite the increased complexity.

Inventive Principle:

Principle #1Segmentation

Data Source

PatentUS10740461B2Identification of entity performing operation on local file(s) and notification to reduce misuse risk

Publication Date: 2020.08.11 MICROSOFT TECHNOLOGY LICENSING LLC

AI summary

Identification of an entity performing a deletion or modification action on locally stored files and notification to mitigate risks to cloud stored files is provided. A local or remote file watcher may monitor locally stored files and detect a deletion or modification action. The file watcher may also identify an entity performing the deletion or modification action. The entity may be an application, a process, a user other than the user that is the owner of the files, or the user himself/herself. The file watcher may further determine one or more alert conditions or rules associated with the affected file(s) and/or the entity, that is under which circumstances an alert is to be issued. The alert notification(s) may be issued to the user, an administrator, a cloud storage service, and/or a data protection service such that protective measures can be taken if necessary.