Patent ID: 8910288

Claim:
An apparatus comprising: at least one processor; at least one device port or drive configured to communicatively receive connection of a portable data storage medium to the apparatus; a network interface; and at least one memory storing computer readable instructions that, when executed, cause the apparatus to: receive at least one of operating system software and antivirus software from a device management server over a set of one or more predetermined network ports; identify a direct attachment of a portable storage medium via the at least one device port or drive; scan a plurality of files stored on the attached portable storage medium using software installed on the apparatus; receive, via a user interface on the apparatus, user input specifying a user rights assignment for a first file on the attached portable storage medium; assign the user rights assignment to the first file by transmitting data identifying the user rights assignment for the first file to the device management server via the network interface, wherein the first file on the attached portable storage medium is not modified, and wherein the first file is not transmitted to the device management server with the data identifying the user rights assignment; and transmit results of the scan of the plurality of files over the set of predetermined network ports to the device management server, wherein the memory stores an operating system in which communication to and from the apparatus through one or more network ports, other than the set of predetermined network ports used to receive software from the device management server and transmit scan results to the device management server, is disabled or not supported.