Policy based clipboard access
AssigneeVMware, Inc.
InventorsXinpi Du, Ali Mohsin
Life of this patent
Estimating the term…
Abstract
Disclosed are various examples for providing access to a clipboard based at least in part on one or more policies. Data is received from a client application. A permission associated with the client application is checked, the permission specifying that the client application is authorized to store data in a clipboard provided by an operating system of the computing device. In response, the data received from the client application is stored in the clipboard.
Claims17
A system for providing policy-based access to a clipboard, comprising:
- a computing device comprising a processor and a memory;
- an operating system stored in the memory, the operating system providing the clipboard class, an individual instance of which can be used by a client application executing on the computing device to access a clipboard provided by the operating system of the computing device;
- and
- machine readable instructions stored in the memory that extend the clipboard class and, when executed by the processor, cause the computing device to at least:
- intercept a request from the client application to access the clipboard, wherein the request comprises data to be stored in the clipboard;
- check a permission associated with the client application, wherein the permission is checked by:
- transmitting a query over a network to a management service, the query including a device identifier assigned to the computing device by the management service, the management service using the device identifier to manage an operation of the computing device;
- and
- receiving a response from management service, the response indicating that the client application is authorized to store the data in the clipboard;
- generate encrypted data based on the data received from the client application using a temporary encryption key, wherein the temporary encryption key is generated at a point in time in which the computing device was powered on;
- and
- store the encrypted data in the clipboard.
A computer-implemented method for providing policy-based access to a clipboard, comprising:
- intercepting a request from a client application to access the clipboard, the client application being executed on a computing device, the clipboard being provided by an operating system of the computing device, and the request comprising data to be stored in the clipboard;
- checking a permission associated with the client application, wherein the permission is checked by:
- transmitting a query over a network to a management service, the query including a device identifier assigned to the computing device by the management service, the management service using the device identifier to manage an operation of the computing device;
- and
- receiving a response from management service, the response indicating that the client application is authorized to store the data in the clipboard;
- generating encrypted data based on the data received from the client application using a temporary encryption key, wherein the temporary encryption key is generated at a point in time in which the computing device was powered on;
- and
- storing the encrypted data in the clipboard.
A non-transitory computer readable medium embodying executable instructions which, when executed by a processor, cause a computing device to at least:
- intercept a request from a client application to access a clipboard, the client application being executed on the computing device, the clipboard being provided by an operating system of the computing device, and the request comprising data to be stored in the clipboard;
- check a permission associated with the client application, wherein the permission is checked by:
- transmitting a query over a network to a management service, the query including a device identifier assigned to the computing device by the management service, the management service using the device identifier to manage an operation of the computing device;
- and
- receiving a response from management service, the response indicating that the client application is authorized to store the data in the clipboard;
- generate encrypted data based on the data received from the first client application using a temporary encryption key, wherein the temporary encryption key is generated prior to receiving the data from the client application;
- and
- store the encrypted data in the clipboard.
Dependencies are inferred from the claim text.