Patent ID: 8782800

Claim:
A method for use in a computer system having host computers for communicating with a server in a network, the method comprising: receiving, by a host from the server, a master set of policies relating to file operations including policy options relating to whether operations are allowed or banned, and if operations are allowed, with what conditions such file operations are allowed; after receiving the master set, receiving a value indicating which subset of the master set of policies and policy options to implement on the host; the host implementing the file operation policies indicated by the value; the host maintaining state information associated with files, the state information being used to determine whether and how the file can be used, the states including allowed, banned, or pending, the allowed and banned states indicating that a desired use is allowed or banned, respectively, and a pending indicating that a state has not yet been determined as allowed or banned, the policy options including permitting execution and/or reading of files with a pending state, or banning execution and/or reading of files with a pending state; the host sending state information to the server and receiving state information from the server, the host maintaining state information separately and independently of the server; and responsive to information from the server, permitting execution and/or reading of files with a pending state.