Patent ID: 7100047

Claim:
A process for controlling access to digital assets in a network of data processing devices, the process comprising: defining a security perimeter that includes two or more data processing devices; defining one or more digital asset encryption policies, to be applied to digital assets when a possible risk in use of a digital asset by an end user occurs; sensing atomic level digital asset access events, the sensing step located within an operating system kernel in an end user client device, at a point of authorized access to the digital asset by the end user; aggregating multiple atomic level events to determine a sequence of digital asset access events; if the sequence of digital asset access events matches a predefined digital asset usage policy that indicates a risk of use of the digital asset outside of the security perimeter; asserting one of the digital asset encryption policies associated with the sequence of events, by encrypting the digital asset, prior to allowing access to the digital asset from outside the security perimeter.