Patent ID: 7690045

Claim:
An access control method implemented on a computing device having a processor and memory on which is instantiated a security reference monitor (SRM), the method comprising: receiving, at the SRM, a stream of data from a first entity; scanning the streamed data with a scan engine of the SRM to determine, based on predetermined criteria, whether the streamed data should be withheld from an intended recipient of the streamed data; encrypting the streamed data with an encryptor of the SRM and according to a cryptographic key selected for the streamed data; transmitting, on-the-fly, the encrypted streamed data from the SRM to the intended recipient without storing the streamed data at the SRM; and determining, by a processor, to transmit the cryptographic key from the SRM to the intended recipient at the end of the transmission of the encrypted streamed data only if the scan engine of the SRM determines based on the predetermined criteria that the transmission should be allowed.