Back to results
US 12,182,312 B1Granted
Techniques to support tiered security zones for web-based applications
AssigneeHere Enterprise Inc.
InventorChuck Doerr
Life of this patent
Estimating the term…
Abstract
First data from a first application logically located in a first security zone may be identified. A processing device may determine a second application is logically located in a second security zone having a higher trust level than the first security zone based on configuration data. The first data may be communicated, via an interoperation bus, to the second application based on the second security zone having the higher trust level.
Claims16
A method, comprising:
- identifying first data from a first application logically located in a first security zone;
- determining, by a processing device, a second application is logically located in a second security zone having a higher trust level than the first security zone based on configuration data;
- communicating, via an interop bus, the first data to the second application based on the second security zone having the higher trust level;
- identifying second data from the first application logically located in the first security zone;
- determining, based on the configuration data, a third application is logically located in a third security zone having a lower trust level than the first security zone;
- and
- blocking communication of the second data to the third application based on the third security zone having the lower trust level, wherein communication of the second data to the third application is blocked based on an attempted copy and paste operation from the first application to the third application.
4 more elements
A system comprising:
- a memory;
- and a processing device, operatively coupled to the memory, to:
- identify first data from a first application logically located in a first security zone;
- determine a second application is logically located in a second security zone having a higher trust level than the first security zone based on configuration data;
- communicate, via an interop bus, the first data to the second application based on the second security zone having the higher trust level;
- identify second data from the first application logically located in the first security zone;
- determine, based on the configuration data, a third application is logically located in a third security zone having a lower trust level than the first security zone;
- and
- block communication of the second data to the third application based on the third security zone having the lower trust level, wherein communication of the second data to the third application is blocked based on an attempted copy and paste operation from the first application to the third application.
6 more elements
A non-transitory computer-readable storage medium including instructions that, when executed by a processing device, cause the processing device to:
- identify first data from a first application logically located in a first security zone;
- determine a second application is logically located in a second security zone having a higher trust level than the first security zone based on configuration data;
- communicate, via an interop bus, the first data to the second application based on the second security zone having the higher trust level;
- identify second data from the first application logically located in the first security zone;
- determine, based on the configuration data, a third application is logically located in a third security zone having a lower trust level than the first security zone;
- and
- block communication of the second data to the third application based on the third security zone having the lower trust level, wherein communication of the second data to the third application is blocked based on an attempted copy and paste operation from the first application to the third application.
4 more elements
Dependencies are inferred from the claim text.