Patent ID: 9246948
Filing Date: 2016-01-26
CPC Classification: G06F,H04L

Claim Text:
1. A computer-implemented method for providing targeted data loss prevention on unmanaged computing devices, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising: identifying a data loss prevention policy that defines permissible data handling within set bounds to prevent unauthorized data exfiltration from the set bounds; identifying an application to install on at least one unmanaged endpoint device, where: the unmanaged endpoint device lacks a data loss prevention agent configured to apply the data loss prevention policy to the entire unmanaged endpoint device; the application is to be provided to the unmanaged endpoint device to operate on sensitive data from within the set bounds; wrapping the application in an application wrapper that intercepts system calls from the application and applies the data loss prevention policy to sensitive data implicated in the system calls, where the application wrapper thereby applies the data loss prevention policy to data handled by the application instead of applying the data loss prevention policy to the entire unmanaged endpoint device.