Patent ID: 9740567
Date: 2017-08-22
CPC Classifications: G06F,H04L

Claim:
1. A method comprising: by a computerized platform, selectively providing data to different computerized processes that are associated with said computerized platform, wherein said providing comprises selectively providing data to a data-requesting process either in encrypted form or in decrypted form, by performing: (a) storing encrypted data in a local storage unit of said computerized platform; (b) analyzing a request, that was received from said data-requesting process which requests said encrypted data from said local storage unit; (c) retrieving a set of one or more parameters that are associated with said data-requesting process; (d) retrieving a pre-defined security policy that is associated with at least one parameter of said set of one or more parameters of said data-requesting process; (e) determining whether (I) the set of one or more parameters of said data-requesting process, corresponds to (II) said security policy applied to at least one of said parameters; (f) based on said one or more parameters of said data-requesting process, and based also on said pre-defined security policy that is associated with at least one parameter of said set of one or more parameters of said data-requesting process, determining both; (I) whether to provide said data to said data-requesting process in encrypted form or in decrypted form, and also (II) which encryption key to utilize if said data is to be provided in encrypted form to said data-requesting process; performing kernel-level analysis of a destination of a data packet, by a kernel-level module that monitors at kernel level one or more requests for data; based on kernel-level analysis by the kernel-level module of a kernel-level operating system event, determining whether or not said destination is part of a back-up system; if it is determined, based on the kernel-level analysis of the kernel-level operating system event, that said destination is part of the backup system then; delivering said data in encrypted format to said destination; if it is determined, based on the kernel-level analysis of the kernel-level operating system event, that said destination is not park of the backup system then: delivering said data in decrypted format to said destination.