US 2019/0097977 A1Published application

Browser switching system and methods

AssigneeL3 Technologies, Inc.

InventorsPeter Martz, Kenneth Moritz, Glenn Coleman

Life of this patent

Estimating the term…

Loading patent…

Abstract

A host computer system may be configured to connect to a network. The host computer system may be configured to implement a workspace and an isolated computing environment. The host computer system may be configured to isolate the isolated computing environment from the workspace using an internal isolation firewall. The host computer system may be configured to receive a request to communicate with a first network destination. On a condition that the first network destination is determined to be trusted, the processor may be configured to communicate with the first network destination via a first browser process executed in the workspace. On a condition that the first network destination is determined to be untrusted, the processor may be configured to communicate with the first network destination via a second browser process executed in the isolated computing environment.

Claims20

Dependent claims

A host computer system configured to connect to a network, the host computer system comprising:

a memory;
and
a processor configured to:
implement a workspace, wherein the workspace is configured to enable operation of a first set of one or more applications or processes via a first memory space;
implement an isolated computing environment, the isolated computing environment being configured to enable operation of a second set of one or more applications or processes via a second memory space, the isolated computing environment configured to authenticate with an authorization device;
isolate the isolated computing environment from the workspace using an internal isolation firewall, the internal isolation firewall being configured to prevent data from being communicated between the isolated computing environment and the workspace without an explicit user input;
receive a request to communicate with a first network destination;
determine whether the first network destination is trusted or untrusted;
on a condition that the first network destination is determined to be trusted, communicate with the first network destination via a first browser process executed in the workspace;
and
on a condition that the first network destination is determined to be untrusted, communicate with the first network destination via a second browser process executed in the isolated computing environment.

8 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/146,149Filed 28 Sep 2018
Priority: 28 Sep 2017
Published: 28 Mar 2019
Term ends: Not estimatedThe source records don’t support an estimate.

Classification11 codes

H04L 63/0281
For separating internal from external traffic, e.g. firewalls: proxies
G06F 21/53
During program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow: by executing in a restricted environment, e.g.…
H04L 63/0209
For separating internal from external traffic, e.g. firewalls: architectural arrangements, e.g. perimeter networks or demilitarized zones
H04L 63/0853
For authentication of entities: using an additional device, e.g. smartcard, SIM or a different communication terminal

Family

Application62/564,928Us provisional application · filed 28 Sep 2017
US 11,044,233 B2Related patent
US 2019/0097977 A1This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key