Patent ID: 11886716
Assignee: DRIVE SENTRY LIMITED
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 0:
1. In a computer comprising a storage medium and an application running on said computer, a method of controlling write access to said storage medium by said application comprising:
detecting a first attempt by the application to write data to said storage medium of a first computer;
in response to said first write attempt, attempting to retrieve a permission value from a database comprised of data elements encoding at least one permission value associated with one or more applications;
in the case that no permission value for the running application is found in the database, transmitting to a central server operatively connected to the first computer and to at least one additional computer, a query comprised of an indicia of identity associated with said running application, wherein said indicia of identity comprises a name, a permission value, or an application signature of the running application;
receiving from said central server, data that represents the collective response of the user of the at least one additional computer to requests by the same application running on said at least one additional computer to access the storage medium that comprises said at least one additional computer;
displaying on a user interface of said computer graphical forms representative of said collective response data;
encrypting or compressing a copy of said data received from the central server;
saving all or part of the encrypted or compressed copy of said data received from the central server to said storage medium;
detecting a second attempt by the application to write data to said storage medium of a first computer;
in response to said second write attempt, testing an integrity of the second write attempt against the encrypted or compressed copy of said data received from the central sever;
in the case of testing the integrity of the second write attempt against the encrypted or compressed copy of said data received from the central sever, detecting a defection of a destroyed application or data from the second attempt by the application to write data;
in the case of a detection of a destroyed application or data for the running application is found, transmitting to a vault system operatively connected to the first computer, a request to decrypt or decompress said encrypted or compressed copy associated with said running application;
receiving from said vault system, all or part of the encrypted or compressed copy of said data requested from the central server;
in response to said receiving all or part of the encrypted or compressed copy of said data requested from the central server, replacing the detected destroyed application or data of the running application from the received all or part of the encrypted or compressed copy of data in the vault system.