Abstract: A computer data security system, including a file parser for determining if a computer file contains protected data, a file decrypter for decrypting encoded files, a file encrypter for re-encoding decrypted files that have been modified, a rights processor for determining data usage rights for a process that has been launched, the data usage rights restricting the process by limiting permissible data access commands that can be issued by the process, and a process monitor for monitoring processes within a computer, including a command interceptor for intercepting a data access command issued by the process, and a command blocker for blocking the intercepted command if the intercepted command accesses protected data, and if the data usage rights indicate that the command is not permissible. A method is also described and claimed.

Abstract: A computer data security system, including a file parser for determining if a computer file contains protected data, a file decrypter for decrypting encoded files, a file encrypter for re-encoding decrypted files that have been modified, a rights processor for determining data usage rights for a process that has been launched, the data usage rights restricting the process by limiting permissible data access commands that can be issued by the process, and a process monitor for monitoring processes within a computer, including a command interceptor for intercepting a data access command issued by the process, and a command blocker for blocking the intercepted command if the intercepted command accesses protected data, and if the data usage rights indicate that the command is not permissible. A method is also described and claimed.