Back to results
US 2019/0097972 A1Published application
Document isolation
AssigneeL3 Technologies, Inc.
InventorsGlenn Coleman, Peter Martz, Kenneth Moritz
Life of this patent
Estimating the term…
Abstract
Methods and systems are disclosed for document isolation. A host computer system may be configured to implement document isolation via one or more of a host-based firewall, an internet isolation firewall, and/or a segregation of a trusted memory space and an untrusted memory space. The host computer system may be configured to access one or more files using a first set of one or more applications and/or processes operating within the trusted memory space and/or a second set of one or more applications and/or processes operating within an untrusted memory space. The host computer system may be configured to open (e.g., always open) the one or more accessed files in the trusted memory space of the host computer system.
Claims20
A host computer system comprising:
- a memory;
- and
- a processor configured to:
- implement a workspace, wherein the workspace is configured to enable operation of a first set of one or more applications or processes via a first memory space;
- implement an isolated computing environment, the isolated computing environment being configured to enable operation of a second set of one or more applications or processes via a second memory space;
- isolate the isolated computing environment from the workspace using an internal isolation firewall;
- retrieve one or more files using at least one of the second set of the one or more applications or processes associated with the isolated computing environment;
- request an explicit user input to allow the one or more files to be transferred from the isolated computing environment to the workspace;
- and
- on a condition that the explicit user input has been received, open the one or more files using at least one of the first set of the one or more applications or processes in the workspace, wherein the internal isolation firewall is configured to block transmission of the one or more files from the isolated computing environment to the workspace absent the explicit user input.
7 more elements
A system comprising:
- a network having a plurality of host computer system, wherein at least a first host computer system of the plurality of host computer system is configured to:
- implement a workspace, the workspace being configured to enable operation of a first set of one or more applications or processes via a first memory space,
- implement an isolated computing environment, the isolated computing environment being configured to enable operation of a second set of one or more applications or processes via a second memory space,
- isolate the isolated computing environment from the workspace using an internal isolation firewall,
- retrieve one or more files from an untrusted network destination using at least one of the second set of the one or more applications or processes associated with the isolated computing environment,
- request an explicit user input to allow the one or more files to be transferred from the isolated computing environment to the workspace, and
- on a condition that the explicit user input has been received, open the one or more files using at least one of the first set of the one or more applications or processes in the workspace, wherein the internal isolation firewall is configured to block transmission of the one or more files from the isolated computing environment to the workspace absent an explicit user authorization;
- and
- a proxy device configured to:
- proxy communication between the isolated computing environment and the untrusted network destination;
- and
- block any communication between the workspace of the first host computer system and the untrusted network destination.
9 more elements
A method of configuring a host computer system, the method comprising:
- implementing a workspace, the workspace being configured to enable operation of a first set of one or more applications or processes via a first memory space;
- implementing an isolated computing environment, the isolated computing environment being configured to enable operation of a second set of one or more applications or processes via a second memory space;
- isolating the isolated computing environment from the workspace using an internal isolation firewall;
- retrieving one or more files using at least one of the second set of the one or more applications or processes associated with the isolated computing environment;
- requesting an explicit user input to allow the one or more files to be transferred from the isolated computing environment to the workspace;
- and
- on a condition that the explicit user input has been received, opening the one or more files using at least one of the first set of the one or more applications or processes in the workspace, wherein the internal isolation firewall is configured to block transmission of the one or more files from the isolated computing environment to the workspace absent the explicit user input and block incoming communications from the isolated computing environment to the workspace.
4 more elements
Dependencies are inferred from the claim text.