Controlling applications by an application control system in a computer device

A system, comprising:

• a memory device;
• and
• at least one computing device in communication with the memory device, the at least one computing device being configured to:
• intercept a request to launch a requested application on the at least one computing device by a calling process executed by the at least one computing device, wherein the request includes information identifying the requested application;
• determine that a user interaction is required before launching the requested application by consulting a set of application policies based on the information identifying the requested application;
• in response to determining that the user interaction is required, establish that the calling process is associated with a controlling terminal provided by an operating system of the at least one computing device, wherein a process session group containing processes launched within a user session is selectively associated with the controlling terminal by the operating system;
• and
• in response to establishing that the calling process is associated with the controlling terminal, perform the user interaction via a pair of input and output channels of the controlling terminal, wherein the user interaction comprises receiving user input via the at least one computing device.

A non-transitory computer-readable medium embodying a program that, when executed by at least one computing device, causes the at least one computing device to:

• intercept a request to launch a requested application on the at least one computing device by a calling process, wherein the request includes information identifying the requested application;
• determine that a user interaction is required before launching the requested application by consulting a set of application policies based on the information identifying the requested application;
• in response to determining that the user interaction is required, establish that the calling process is associated with a controlling terminal provided by an operating system of the at least one computing device, wherein a process session group containing processes launched within a user session is selectively associated with the controlling terminal by the operating system;
• and
• in response to establishing that the calling process is associated with the controlling terminal, perform an authentication action including the user interaction using the controlling terminal by receiving user input operatively connected to the at least one computing device, wherein the authentication action is performed via a pair of input and output channels of the controlling terminal, wherein
• the authentication action comprises receiving user input via an input device connected to the at least one computing device.