Techniques for improving seamless user experience on air-gapped endpoints
AssigneeHysolate Ltd.
InventorsOleg Zlotnik, Nir Adler, Tal Zamir
Life of this patent
Estimating the term…
Abstract
A method for performing user experience (UX) functions on an air-gapped endpoint is provided. The method includes monitoring a plurality of security zones, instantiated on the air-gapped endpoint, to detect at least one UX command executed in a first security zone; determining if the detected UX command triggers a UX function effecting a second security zone; determining if the UX function to be triggered maintains compliance with a security policy of the first and second security zones; and executing the UX function across the first and second security zones.
Claims18
A method for performing user experience (UX) functions on an air-gapped endpoint, comprising:
- monitoring, by a hypervisor, a plurality of security zones, instantiated on the air-gapped endpoint, to detect at least one UX command executed in a first security zone;
- determining if the detected UX command triggers a UX function effecting a second security zone, wherein the UX function causes a URL redirection;
- determining if the UX function to be triggered maintains compliance with a security policy of the first security zone and second security zone;
- executing the UX function across the first security zone and second security zone;
- capturing a request to access a website on the first security zone, wherein the request includes at least a URL of a website that does not comply with the security policy of the first security zone;
- redirecting the request to access the website to the second security zone, wherein the URL designated in the request complies with the security policy of the second security zone;
- and
- in response to the execution of the UX function causing, by the hypervisor, rendering of windows of applications executed in the first security zone and second security zone, wherein the windows are displayed on the same desktop display.
A non-transitory computer readable medium having stored thereon instructions for causing a processing circuitry to execute a process for performing user experience (UX) functions on an air-gapped endpoint, the process comprising:
- monitoring, by a hypervisor, a plurality of security zones, instantiated on the air-gapped endpoint, to detect at least one UX command executed in a first security zone, wherein the UX function causes a URL redirection;
- determining if the detected UX command triggers a UX function effecting a second security zone;
- determining if the UX function to be triggered maintains compliance with a security policy of the first security zone and second security zone;
- executing the UX function across the first security zone and second security zone;
- capturing a request to access a website on the first security zone, wherein the request includes at least a URL of a website that does not comply with the security policy of the first security zone;
- redirecting the request to access the website to the second security zone, wherein the URL designated in the request complies with the security policy of the second security zone;
- and
- in response to the execution of the UX function causing, by the hypervisor, rendering of windows of applications executed in the first security zone and second security zone, wherein the windows are displayed on the same desktop display.
An air-gapped computing system, comprising:
- a network card interface;
- a processing circuitry;
- and
- a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:
- monitor a plurality of security zones, instantiated on the air-gapped endpoint, to detect at least one UX command executed in a first security zone, wherein the UX function causes a URL redirection;
- determine, by a hypervisor, if the detected UX command triggers a UX function effecting a second security zone;
- determine if the UX function to be triggered maintains compliance with a security policy of the first security zone and second security zone;
- execute the UX function across the first security zone and second security zone;
- and
- capture a request to access a website on the first security zone, wherein the request includes at least a URL of a website that does not comply with the security policy of the first security zone;
- redirect the request to access the website to the second security zone, wherein the URL designated in the request complies with the security policy of the second security zone;
- in response to the execution of the UX function causing, by the hypervisor, rendering of windows of applications executed in the first security zone and second security zone, wherein the windows are displayed on the same desktop display.
Dependencies are inferred from the claim text.