Emulating transparent file processing

Patent metadata

Field	Value
Publication number	US-9824090-B2
Application number	US-201514682186-A
Country	US
Kind code	B2
Filing date	Apr 9, 2015
Priority date	Apr 9, 2015
Publication date	Nov 21, 2017
Grant date	Nov 21, 2017

Abstract

Transparent file processing is supported in Unix-like operating systems by emulating the desired file processing through a number of recipes that accommodate different contexts. Recipes are provided, for example, for local folders in user space, for whole devices (e.g., flash drives or network drives), and for folders synchronized to cloud data. By detecting the path type for a file operation and selecting and applying the appropriate recipe, file processing can be performed in a manner transparent to the user.

First claim

What is claimed is:

1. A method for emulating transparent file processing, the method comprising:
receiving a file operation for a file, the file operation being a user-space file operation specifying a label for a volume and a path specifying a unique location in a file system on the volume;
determining a type for the path, wherein the type is selected from a group consisting of an existing folder in the file system, a physical device, and a synchronized folder for a remote service;
selecting a recipe for executing the file operation based upon the type, thereby providing a selected recipe, wherein the selected recipe includes overmounting when the type includes the existing folder, remounting when the type includes the physical device, and creating a new label when the type includes a synchronized folder; and
executing the file operation on the file with the selected recipe transparently to a user process that initiated the file operation, wherein the recipe encrypts the file when the file is moved to the path by the file operation and decrypts the file when the file is moved from the path by the file operation.

2. The method of claim 1 wherein, when the type includes the physical device, the physical device includes one or more of a flash drive, a removable disk, a mobile device, and a network drive.

3. The method of claim 1 wherein, when the selected recipe includes overmounting, overmounting includes:
moving a folder at the unique location to a new location that atomically relinks directory entries on the same file system partition;
marking the new location as hidden using a filename; and
mounting a secure directory using a secure mount point process at the unique location specified by the path and label.

4. The method of claim 1 wherein, when the selected recipe includes remounting, remounting includes:
unmounting the physical device;
remounting the physical device at a hidden location; and
mounting a secure directory using a secure mount point process at the unique location specified by the path and label.

5. The method of claim 1 wherein, when the selected recipe includes creating a new label, creating a new label includes:
creating a secure directory using a secure mount point process at a new location adjacent to the unique location;
marking the unique location as hidden using a file system folder attribute;
using a new label for the new location and renaming the new location to the unique location; and
redirecting access to the unique location to the new location.

6. The method of claim 5 wherein redirecting includes applying a redirection through an application programming interface of a file browser.

7. The method of claim 5 wherein redirecting includes applying a redirection with a scripting interface of a file browser.

8. A computer program product comprising computer executable code for emulating transparent file processing embodied in a non-transitory computer readable medium that, when executing on one or more computing devices, performs the steps of:
receiving a file operation for a file, the file operation being a user-space file operation specifying a label for a volume and a path specifying a unique location in a file system on the volume;
determining a type for the path, wherein the type is selected from a group consisting of an existing folder in the file system, a physical device, and a synchronized folder;
selecting a recipe for executing the file operation based upon the type, thereby providing a selected recipe, wherein the selected recipe includes overmounting when the type includes the existing folder, remounting when the type includes the physical device, and creating a new label when the type includes a synchronized folder; and
executing the file operation on the file with the selected recipe transparently to a user process that initiated the file operation, wherein the recipe encrypts the file when the file is moved to the path by the file operation and decrypts the file when the file is moved from the path by the file operation.

9. The computer program product of claim 8 wherein, when the type includes the physical device, the physical device includes one or more of a flash drive, a removable disk, a mobile device, and a network drive.

10. The computer program product of claim 8 wherein, when the selected recipe includes overmounting, overmounting includes:
moving a folder at the unique location to a new location that atomically relinks directory entries on the same file system partition;
marking the new location as hidden using a filename; and
mounting a secure directory using a secure mount point process at the unique location specified by the path and label.

11. The computer program product of claim 8 wherein, when the selected recipe includes remounting, remounting includes:
unmounting the physical device;
remounting the physical device at a hidden location; and
mounting a secure directory using a secure mount point process at the unique location specified by the path and label.

12. The computer program product of claim 8 wherein, when the selected recipe includes creating a new label, creating a new label includes:
creating a secure directory using a secure mount point process at a new location adjacent to the unique location;
marking the unique location as hidden using a file system folder attribute;
using a new label for the new location and renaming the new location to the unique location; and
redirecting access to the unique location to the new location.

13. The computer program product of claim 12 wherein redirecting includes applying a redirection through an application programming interface of a file browser.

14. The computer program product of claim 12 wherein redirecting includes applying a redirection with a scripting interface of a file browser.

15. A system comprising:
a device having a processor and a memory; and
computer code stored in the memory that configures the processor to emulate transparent file processing for a user by performing the steps of receiving a file operation for a file, the file operation being a user-space file operation specifying a label for a volume and a path specifying a unique location in a file system on the volume, determining a type for the path, wherein the type is selected from a group consisting of an existing folder in the file system, a physical device, and a synchronized folder for a remote service, selecting a recipe for executing the file operation based upon the type, thereby providing a selected recipe, wherein the selected recipe includes overmounting when the type includes the existing folder, remounting when the type includes the physical device, and creating a new label when the type includes a synchronized folder, and executing the file operation on the file with the selected recipe transparently to a user process that initiated the file operation, wherein the selected recipe compresses the file when the file is moved to the path by the file operation and decompresses the file when the file is moved from the path by the file operation.

16. A method for emulating transparent file processing, the method comprising:
receiving a file operation for a file, the file operation being a user-space file operation specifying a label for a volume and a path specifying a unique location in a file system on the volume;
determining a type for the path, wherein the type is selected from a group consisting of an existing folder in the file system, a physical device, and a synchronized folder;
selecting a recipe for executing the file operation based upon the type,

Assignees

• Sophos Ltd

Inventors

• Hayrapetian Gregory
• Hein Markus
• Huch Martin
• Lorenz Oliver
• Murauer Johann
• Perndl Stefan
• Praher-Köppl Christian
• Traunmüller Bernhard
• Wintersberger Gerald
• Zach Michael

Classifications

• G06F16/10

  File systems; File servers · CPC title

• G06F16/116

  Details of conversion of file system types or formats · CPC title

• G06F16/16 Primary

  File or folder operations, e.g. details of user interfaces specifically adapted to file systems · CPC title

• G06F16/1727

  Details of free space management performed by the file system (saving storage space on storage systems G06F3/0608; management of blocks in storage devices G06F3/064) · CPC title

• G06F16/13

  File access structures, e.g. distributed indices (arrangements of input from, or output to, record carriers G06F3/06) · CPC title