Patent ID: 7594266
Filing Date: 2009-09-22
Classification: G06F

Abstract:
1. A method of detecting and preventing intrusion in a data at rest system comprising: receiving a plurality of intrusion detection profiles from an access control system, each profile including at least one item access rule, wherein a plurality of users are associated with at least one of the intrusion detection profiles; receiving a request for data in a data at rest system from a user; receiving a result for the request from the data at rest system if the request is not a per se violation of one of the at least one item access rules, wherein the result is a subset of data in the data at rest system; determining whether the result of said request causes the user to violate the at least one item access rule defined in the intrusion detection profile associated with the user; and if the at least one item access rule is violated, notifying the access control system to alter user authorization, thereby preventing the result of the request from being transmitted to the user.