US 2019/0098007 A1Published application

Endpoint protection and authentication

AssigneeL3 Technologies, Inc.

InventorsGlenn Coleman, Peter Martz, Kenneth Moritz

Life of this patent

Estimating the term…

Loading patent…

Abstract

Methods and systems are disclosed for endpoint protection and authentication schemes for a host computer system having an internet isolation system. A first host computer system may include a first memory space and a second memory space. The first memory space may be configured to enable storage and operation of a workspace configured to execute a first set of one or more applications and processes running on an operating system of the first host computer system. The second memory space may be configured to enable storage and operation of a second set of one or more applications and processes associated with an isolated computing environment (e.g., a sandboxed computing environment) configured to run on the operating system. When the first host computer system is connected to a network that is known or associated with a predetermined security policy, the first host computer system may instantiate a predetermined security policy configuration.

Claims20

Dependent claims

A host computer comprising:

a memory;
and
a processor configured to:
implement a workspace, the workspace being configured to enable operation of a first set of one or more applications or processes via a first memory space;
implement an isolated computing environment, the isolated computing environment being configured to enable operation of a second set of one or more applications or processes via a second memory space;
isolate the isolated computing environment from the workspace using an internal isolation firewall;
process communications exchanged between the host computer and a network to which the host computer is connected using a host-based firewall, wherein the host-based firewall is configured to implement a first policy for communications associated with the isolated computing environment and a second policy for communications associated with the workspace;
determine a relative location of the host computer;
select an authentication procedure for authenticating the isolated computing environment with at least one server based on the determined relative location of the host computer;
and
authenticate the isolated computing environment with the at least one server in accordance with the selected authentication procedure.

8 more elements

A server, the server comprising:

a memory;
and
a processor configured to send one or more downloadable executable files to a host computer, wherein when the one or more downloadable executable files run on the host computer, the one or more downloadable executable files configure the host computer to:
implement a workspace, the workspace being configured to enable operation of a first set of one or more applications or processes via a first memory space;
implement an isolated computing environment, the isolated computing environment being configured to enable operation of a second set of one or more applications or processes via a second memory space;
isolate the isolated computing environment from the workspace using an internal isolation firewall;
process communications exchanged between the host computer and a network to which the host computer is connected using a host-based firewall, wherein the host-based firewall is configured to implement a first policy for communications associated with the isolated computing environment and a second policy for communications associated with the workspace;
determine a relative location of the host computer;
select an authentication procedure for authenticating the isolated computing environment with at least one authentication server based on the determined relative location of the host computer;
and
authenticate the isolated computing environment with the at least one authentication server in accordance with the selected authentication procedure.

8 more elements

A method for authenticating a communication between a host computer and a network, the method comprising:

implementing a workspace, the workspace being configured to enable operation of a first set of one or more applications or processes via a first memory space;
implementing an isolated computing environment, the isolated computing environment being configured to enable operation of a second set of one or more applications or processes via a second memory space;
isolating the isolated computing environment from the workspace using an internal isolation firewall;
processing communications exchanged between the host computer and a network to which the host computer is connected using a host-based firewall, wherein the host-based firewall is configured to implement a first policy for communications associated with the isolated computing environment and a second policy for communications associated with the workspace;
determining a relative location of the host computer;
selecting an authentication procedure for authenticating the isolated computing environment with at least one server based on the determined relative location of the host computer;
and
authenticating the isolated computing environment with the at least one server in accordance with the selected authentication procedure.

5 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/142,810Filed 26 Sep 2018
Priority: 28 Sep 2017
Published: 28 Mar 2019
Term ends: Not estimatedThe source records don’t support an estimate.

Classification11 codes

H04L 63/0876
For authentication of entities: based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or…
G06F 21/44
Authentication, i.e. establishing the identity or authorisation of security principals: program or device authentication
G06F 21/53
During program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow: by executing in a restricted environment, e.g.…
H04L 63/08
Network architectures or network communication protocols for network security: for authentication of entities