Securing data across execution contexts

A computing device comprising:

• a memory;
• and
• a processor coupled to the memory, the processor and memory being configured to:
• run first code in a first execution context, code running in the first execution context having access to a first set of resources of the computing device;
• run second code in a second execution context, code running in the second execution context having access to a second set of resources of the computing device, wherein the first set of resources is different than the second set of resources;
• determine that first data is to be passed from the first code in the first execution context to the second code in the second execution context;
• based on determining that the first data is to be passed, tokenize the first data to generate tokenized first data, wherein tokenizing the first data comprises substituting the first data with second data that is based on the first data to secure the first data from the second code, the second data being the tokenized first data;
• and
• pass the tokenized first data from the first code to the second code.

A non-transitory computer readable medium storing instructions that when executed by a computing device cause the computing device to perform a method for securing data across execution contexts in the computing device, the method comprising:

• running, by the computing device, first code in a first execution context, code running in the first execution context having access to a first set of resources of the computing device;
• running, by the computing device, second code in a second execution context, code running in the second execution context having access to a second set of resources of the computing device, wherein the first set of resources is different than the second set of resources;
• determining that first data is to be passed from the first code in the first execution context to the second code in the second execution context;
• based on determining that the first data is to be passed, tokenizing the first data to generate tokenized first data, wherein tokenizing the first data comprises substituting the first data with second data that is based on the first data to secure the first data from the second code, the second data being the tokenized first data;
• and
• passing the tokenized first data from the first code to the second code.