Keith A Macdonald

US Patent:

7472272, Dec 30, 2008

Filed:

Nov 18, 2003

Appl. No.:

10/716336

Inventors:

Nicholas Stamos - Belmont MA, US
Seth N. Birnbaum - Boston MA, US
Tomas Revesz, Jr. - Waltham MA, US
Donato Buccella - Watertown MA, US
Keith A. MacDonald - Watertown MA, US
Dwayne A. Carson - Mendon MA, US
William E. Fletcher - Acton MA, US

Assignee:

Verdasys, Inc. - Waltham MA

International Classification:

H04L 9/00

US Classification:

713164, 726 7

Abstract:

A technique for establishing a perimeter of accountability for usage of digital assets such as data files. The accountability model not only tracks authorized users' access to files, but monitors passage of such files to uncontrollable removable storage media or through network connections and the like which may indicate possible abuse of access. In accordance with a preferred embodiment, an autonomous independent agent process running at a point of use, such as in the background of a client operating system kernel, interrupts requests for access to resources. The agent process senses low level system events, filters, aggregates them, and makes reports to a journaling server. The journaling server analyzes sequences of low level events to detect when aggregate events of interest occur, such as “FileEdit”, network file transfers and the like. Reports can be generated to provide an understanding of how digital assets have been accessed, used or communicated by individuals in an enterprise.

US Patent:

7814021, Oct 12, 2010

Filed:

Nov 12, 2003

Appl. No.:

10/706871

Inventors:

Nicholas Stamos - Belmont MA, US
Seth N. Birnbaum - Boston MA, US
Tomas Revesz, Jr. - Waltham MA, US
Donato Buccella - Watertown MA, US
Keith A. MacDonald - Watertown MA, US
Dwayne A. Carson - Mendon MA, US
William E. Fletcher - Acton MA, US

Assignee:

Verdasys, Inc. - Waltham MA

International Classification:

G06F 21/00

US Classification:

705 57, 705 51, 705 52, 705 54

Abstract:

A technique for establishing usage control over digital assets such as computer files. The system model not only tracks authorized users' access to files, but monitors passage of such files to uncontrollable removable storage media or through network connections and the like which may indicate possible abuse of access rights. In accordance with a preferred embodiment, an autonomous independent agent process running at a point of use, such a background process in a client operating system kernel, interrupts requests for access to resources. The agent process senses low level system events, filters, and aggregates them. A policy engine analyzes sequences of aggregate events to determine when policy violations occur.

US Patent:

7934091, Apr 26, 2011

Filed:

Dec 9, 2008

Appl. No.:

12/316125

Inventors:

Nicholas Stamos - Belmont MA, US
Seth N. Birnbaum - Boston MA, US
Tomas Revesz, Jr. - Waltham MA, US
Donato Buccella - Watertown MA, US
Keith A. MacDonald - Watertown MA, US
Dwayne A. Carson - Mendon MA, US
William E. Fletcher - Acton MA, US

Assignee:

Verdasys, Inc. - Waltham MA

International Classification:

H04L 9/00

US Classification:

713164, 726 7, 726 26, 726 27, 705 51

Abstract:

A technique for establishing a perimeter of accountability for usage of digital assets such as data files. The accountability model not only tracks authorized users' access to files, but monitors passage of such files to uncontrollable removable storage media or through network connections and the like which may indicate possible abuse of access. In accordance with a preferred embodiment, an autonomous independent agent process running at a point of use, such as in the background of a client operating system kernel, interrupts requests for access to resources. The agent process senses low level system events, filters, aggregates them, and makes reports to a journaling server. The journaling server analyzes sequences of low level events to detect when aggregate events of interest occur, such as “FileEdit”, network file transfers and the like. Reports can be generated to provide an understanding of how digital assets have been accessed, used or communicated by individuals in an enterprise.