Secure interprocess communication bridge for sensitive data transfer
AssigneeCyberArk Software Ltd.
InventorsNaor Tedri, Yonatan Volkov
Life of this patent
Estimating the term…
Abstract
Systems, methods, and apparatuses are disclosed for securing the use of secondary processes using an interprocess communication bridge. Techniques may include identifying a sensitive data including at least one secret and invoking a secondary process in a computing environment in a suspended mode, wherein the secondary process is configured to perform at least one operation on a file associated with the sensitive data. Techniques may further include injecting at least one code element into the secondary process, the code element being configured to redirect the secondary process to the sensitive data and resuming the secondary process wherein the at least one operation is performed using the sensitive data.
Claims20
A non-transitory computer readable medium including instructions that, when executed by at least one processor, cause the at least one processor to perform operations for securing the use of secondary processes using an interprocess communication bridge, the operations comprising:
- identifying, by a main process, a sensitive data including at least one secret;
- invoking, by the main process, a secondary process in a computing environment in a suspended mode, wherein the secondary process is configured to perform at least one operation on a file associated with the sensitive data;
- injecting, by the main process, at least one code element into the secondary process, the code element being configured to redirect the secondary process to the sensitive data;
- and
- resuming the secondary process, wherein the at least one operation is performed using the sensitive data.
A computer-implemented method for securing the use of secondary processes using an interprocess communication bridge, the method comprising:
- identifying, by a main process, a sensitive data including at least one secret;
- invoking, by the main process, a secondary process in a computing environment in a suspended mode, wherein the secondary process is configured to perform at least one operation on a file associated with the sensitive data;
- injecting, by the main process, at least one code element into the secondary process, the code element being configured to redirect the secondary process to the sensitive data;
- and
- resuming the secondary process, wherein the at least one operation is performed using the sensitive data.
Dependencies are inferred from the claim text.