Sandisk Il Ltd.

Ittai Golde

Yaakov Ben Tsvi

Yehuda Hahn

Itzhak Pomerantz

Donald Ray Bryant-Rich

Erez Baum

Alexander Paley

Leonid Shmulevich

Oron Vexler

Daniel Yerushalmi

Kobi Ben Tzi

The present invention discloses methods for protecting a host system from information-security risks posed by a URD, the method including the steps of: operationally connecting the URD to the host system; communicating, between the URD and the host system, via a network protocol, through a firewall residing in the host system; and configuring said firewall to provide security measures related to the URD. Preferably, the firewall is a software firewall or a hardware firewall. A method for protecting a host system from information-security risks posed by a URD, the method including the steps of: operationally connecting the URD to the host system; communicating, between the URD and the host system, via a network protocol, through a firewall residing in the host system; and configuring said firewall to restrict access of at least one application to the URD. Preferably, the firewall is a software firewall or a hardware firewall.

Methods for firewall protection of mass-storage devices

A system and method to protect a target file from data damage wherein a wrapper application transparently intercepts a write call operative to affect the target file and stores the pertinent data in a delta file. Occasionally the target file is backed up in a temporary file and then updated. The wrapper application also intercepts a read call operative to access the target file and merges the update information with data from the target file in a temporary file. The resulting merged data is returned as read results data.

Incremental transparent file updating

A client designates and transfers a file to a server in distinct chunks. The number of data chunks equals the number of communication sessions that are required to complete the transfer of the designated file to the server, that number being dependent on the number of times the communication session between the client and the server is interrupted. If the designated file includes several concatenated client files, each chunk of the designated file may include one or more such client files. Each chunk of the designated file may include some part of a client file and one or more whole client files. The byte-wise size or length of a chunk depends on the duration of the related communication session: the longer a communication session, the larger the related chunk. By transferring the designated file to the server as distinctly recognizable chunks, the need to retransmit large files to the server is avoided.

Merging files on storage and retrieve

When a non-volatile memory device is reversibly operationally connected to a computer, the computer executes an application that is stored on the device. The execution causes changes to a non-volatile memory of the computer. After the execution terminates, all such changes are undone, either immediately if the termination was normal or upon rebooting the computer if the termination was abnormal. Before or during the execution, information related to the changes is recorded. The undoing of the changes is based on that information. Examples of such information recorded before the execution include a list of expected changes and a partial or full copy of the computer's non-volatile memory.

Method of traceless portable application execution

Growing community of inventors

Rishon Lezion, Israel

Ittai Golde