Protection Against Unintentional File Changing

Abstract

Files are protected against intrusion. A first embodiment protects certain files against changes. A second embodiment encrypts the files that are stored using user's personal information.

What is claimed is: 
     
         1 . A method, comprising:
 operating an operating system by using a processor to execute stored operating system files;   detecting an update requested for at least one of said operating system files;   checking a digital certificate associated with the update, said checking being carried out over the Internet; and   allowing the update to be conducted only if the digital certificate as checked over the internet matches a prestored criteria based on the checking over the internet.   
     
     
         2 . The method as in  claim 1 , wherein said stored operating system files are stored in an encrypted form, and further comprising forming encrypted files by requiring unique information, and using said unique information as part of an encryption and/or decryption operation only when detecting that the digital certificate as checked over the internet matches the criteria. 
     
     
         3 . The method as in  claim 2 , further comprising establishing special files which are read/write files that are not encrypted, and carrying out at least one security measure on said special files. 
     
     
         4 . The method as in  claim 1 , wherein the allowing comprises allowing the update to be conducted only when the digital certificate matches the prestored criteria and a user of the system indicates an intention to proceed with the update. 
     
     
         5 . The method as in  claim 1 , wherein said checking comprises checking for compromises to the digital certificate, and allowing the update to be conducted only when it is determined that the digital certificate should still be accepted. 
     
     
         6 . A computer system, comprising:
 a processor, executing stored operating system files to run a computer;   said processor detecting an update requested for at least one of said operating system files and operating to check a digital certificate associated with the update, by sending a request over the internet and receive a response and allowing the update to be conducted only if the digital certificate as checked over the internet is valid and not compromised.   
     
     
         7 . The computer system as in  claim 6 , wherein said processor stores said stored operating system files in an encrypted form, and said processor forms encrypted files by requiring unique information, and uses said unique information as part of an encryption and/or decryption operation only when detecting that the digital certificate as checked over the internet is valid and not compromised. 
     
     
         8 . The computer system as in  claim 7 , wherein said processor stores other files that are not encrypted, and carries out at least one security measure on said other files. 
     
     
         9 . A computer system, comprising:
 a processor, running a program that allows access to stored information;   a memory, storing information which is accessed by said program;   said memory being internal to the computer and including non-volatile storage,   said program operating to encrypt each of a plurality of file contents before storing the file contents to said memory, and to decrypt each of the plurality of file contents in order to allow the file contents to be used to form an unencrypted form of said file contents;   said computer system also including at least one buffer memory, and said program storing said file contents in said at least one buffer memory in the unencrypted form; and   said computer system also including a port connecting to an external memory device, and said computer system storing said file contents in said external memory in the unencrypted form, wherein the same information is stored to the memory in encrypted form and stored to the buffer memory and to the external memory in the unencrypted form.   
     
     
         10 . The computer system as in  claim 9 , wherein the program receives personal information from a user and based on said personal information about the user, determines if the user is authorized for access, and if the user is authorized for access, then automatically decrypts file contents to read the file contents from the memory, and encrypt file contents to write the file contents in the memory. 
     
     
         11 . The computer system as in  claim 9 , wherein said external memory device is an external hard drive. 
     
     
         12 . The computer system as in  claim 9 , wherein said memory is an internal hard drive. 
     
     
         13 . The computer system as in  claim 9 , wherein the program uses an encryption key that is based on encryption information to carry out said encrypt, and where said encryption key also includes session information which changes when the encrypt is carried out at different times. 
     
     
         14 . The computer system as in  claim 13 , wherein the session information includes a random number. 
     
     
         15 . The computer system as in  claim 9 , wherein the program is at least part of an operating system. 
     
     
         16 . A computer system, comprising:
 a processor, running a program that allows access to stored information;   a memory, storing information which is accessed by said program;   said memory being internal to the computer and including non-volatile storage,   said program operating to allow at least one user to have access to said stored information,   said program operating to detect at least one action in the computer which match to at least one of a first set of actions, where said first set of actions have been previously determined to be likely to represent an attempt to obtain information about the at least one user of the computer, where said first set of actions also have a use within the computer that are not attempt to obtain information about the user of the computer, and   where the program operates to warn a user about said at least one action occurring, and not allowing said at least one action to be carried out without receiving permission from the user.   
     
     
         17 . The computer system as in  claim 16 , further comprising a second program running using the processor that encrypts each of a plurality of file contents before storing the file contents on said memory, and to decrypt each of the plurality of file contents in order to allow a user to interact with the file contents;
 said computer system also including at least one buffer memory, and said program storing said file contents in said buffer memory in an unencrypted form; and   said computer system also including a port connecting to an external memory device, and said computer system storing said file contents in said external memory in the unencrypted form, wherein the same file contents is stored to the memory in encrypted form and stored to the buffer memory and to the external memory in the unencrypted form.   
     
     
         18 . The computer system as in  claim 16 , wherein said first set of actions including taking a screenshot of operations on the computer. 
     
     
         19 . The computer system as in  claim 16 , wherein said first set of actions comprise saving contents of a buffer to a location on said memory. 
     
     
         20 . The computer system as in  claim 16 , wherein said memory is a hard drive.