Patent ID: 9396349
Filing Date: 2016-07-19
CPC Classification: G06F,H04L

Claim Text:
1. A method comprising: providing a security layer for maintaining security within a security perimeter; providing a sharing folder within the security perimeter; providing a first ciphered data file stored within the security perimeter outside the sharing folder, the first ciphered data file secured according to a first security protocol and accessible to trusted applications, and the first ciphered data file not accessible to semi-trusted applications in a deciphered form; providing a second ciphered data file stored within the security perimeter and within the sharing folder, the second ciphered data file secured according to the first security protocol and accessible to semi-trusted applications in a deciphered form; and using a semi-trusted application, transmitting the second ciphered data file in the deciphered form to a destination outside the secure system; wherein ciphering and deciphering of files is performed by the security layer, the security layer supporting access control based on a location of a ciphered file and a trust level of an application accessing said file, wherein the first ciphered data file and the second ciphered data file are exact copies of each other stored in each of two different locations, and wherein the semi-trusted applications are provided access to the first ciphered data file in its ciphered form.