Systems and methods for preventing leakage of protected document data

A method, comprising:

• redirecting a request to open a first document to a background process that controls access to one or more documents including the first document and a second document;
• determining policy information associated with the first document and a user of a first managed application on whose behalf the request to open the first document was received;
• determining, dependent on the policy information associated with the first document and the user, that the first document is a protected document in the first managed application;
• determining that the user is authorized to open the first document;
• providing the first document to the first managed application;
• redirecting a request to open the second document in the first managed application or in a second managed application to the background process on behalf of the user;
• determining policy information associated with the second document and the user;
• determining, dependent on the policy information associated with the second document and the user, that the second document is an unprotected document;
• determining that the user is authorized to open the second document;
• providing the second document to the first managed application or the second managed application;
• detecting a request to copy protected data from the first document to a system clipboard accessible by unprotected documents;
• redirecting the protected data to a secure clipboard, the secure clipboard being separate from the system clipboard and inaccessible by unprotected documents;
• detecting a request to paste the protected data into the second document;
• and
• refraining from pasting the protected data into the second document.

A non-transitory, computer-readable memory medium including instructions that, when executed by at least one processor of an information handling system, cause the information handling system to:

• redirect a request to open a first document to a background process that controls access to one or more documents including the first document and a second document;
• determine policy information associated with the first document and a user of a first managed application on whose behalf the request to open the first document was received;
• determine, dependent on the policy information associated with the first document and the user, that the first document is a protected document in the first managed application;
• determine that the user is authorized to open the first document;
• provide the first document to the first managed application;
• redirect a request to open the second document in the first managed application or in a second managed application to the background process on behalf of the user;
• determine policy information associated with the second document and the user;
• determine, dependent on the policy information associated with the second document and the user, that the second document is an unprotected document;
• determine that the user is authorized to open the second document;
• provide the second document to the first managed application or the second managed application;
• detect a request to copy protected data from the first document to a system clipboard accessible by unprotected documents;
• redirect the protected data to a secure clipboard, the secure clipboard being separate from the system clipboard and inaccessible by unprotected documents;
• detect a request to paste the protected data into the second document;
• and
• refrain from pasting the protected data into the second document.