Method for rendering virtual desktops on an air-gapped endpoint
AssigneePerception Point Ltd.
InventorsOleg Zlotnik, Nir Adler, Tal Zamir
Life of this patent
Estimating the term…
Abstract
A method for rendering virtual desktops on an air-gapped endpoint is provided. The method includes rendering a first window presenting a first virtual desktop of a first security zone; rendering a second window presenting a second virtual desktop display of a second security zone, wherein the first security zone and the second security zone are of a plurality of security zones instantiated on the air-gapped endpoint; and controlling, by a hypervisor, display of the first window and the second window on a desktop of the air-gapped endpoint, wherein any application in the first security zone cannot access any application in the second security zone when displayed on the same desktop.
Claims17
A method for rendering virtual desktops on a virtually as air-gapped endpoint, comprising:
- rendering a first window presenting a first virtual desktop of a first security zone, the first security zone being implemented as a first instantiated, already executing, virtual machine on the virtually air-gapped endpoint that was instantiated using a hypervisor;
- rendering a second window presenting a second virtual desktop display of a second security zone, the second security zone being implemented as a second instantiated, already executing, virtual machine on the virtually air-gapped endpoint that was instantiated using the hypervisor;
- and
- controlling, by the hypervisor, display of the first window and the second window on a desktop of the air-gapped endpoint, wherein any application in the first security zone cannot access any application in the second security zone when displayed on the same desktop;
- and
- initializing, on the virtually air-gapped endpoint, the hypervisor for execution over a primitive operating system (OS) of the virtually air-gapped endpoint, wherein the primitive OS is executed by a hardware layer of the virtually air-gapped endpoint, and wherein the primitive OS is configured to execute only device drivers.
A non-transitory computer readable medium having stored thereon instructions for causing a processing circuitry to execute a process for performing user experience (UX) functions on a virtually an air-gapped endpoint, the process comprising:
- rendering a first window presenting a first virtual desktop of a first security zone, the first security zone being implemented as a first instantiated, already executing, virtual machine on the virtually air-gapped endpoint that was instantiated using a hypervisor;
- rendering a second window presenting a second virtual desktop display of a second security zone, the second security zone being implemented as a second instantiated, already executing, virtual machine on the virtually air-gapped endpoint that was initiated using the hypervisor;
- and
- controlling, by the hypervisor, display of the first window and the second window on a desktop of the air-gapped endpoint, wherein any application in the first security zone cannot access any application in the second security zone when displayed on the same desktop;
- and
- initializing, on the virtually air-gapped endpoint, the hypervisor for execution over a primitive operating system (OS) of the virtually air-gapped endpoint, wherein the primitive OS is executed by a hardware layer of the virtually air-gapped endpoint, and wherein the primitive OS is configured to execute only device drivers.
A virtually air-gapped computing system, comprising:
- a network card interface;
- a processing circuitry;
- and a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:
- render a first window presenting a first virtual desktop of a first security zone, the first security zone being implemented as a first instantiated, already executing, virtual machine on the virtually air-gapped computing system that was instantiated using a hypervisor;
- render a second window presenting a second virtual desktop display of a second security zone, the second security zone being implemented as a second instantiated, already executing, virtual machine on the virtually air-gapped computing system that was instantiated using the hypervisor;
- and control, by the hypervisor, display of the first window and the second window on a desktop of the air-gapped computing system, wherein any application in the first security zone cannot access any application in the second security zone when displayed on the same desktop;
- and
- initializing, on the virtually air-gapped endpoint, the hypervisor for execution over a primitive operating system (OS) of the virtually air-gapped endpoint, wherein the primitive OS is executed by a hardware layer of the virtually air-gapped endpoint, and wherein the primitive OS is configured to execute only device drivers.
Dependencies are inferred from the claim text.