# US 2023/0054350 A1 · Indicator of Security Policy Application for a Portion of Resources on a Machine > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2023/0054350 A1 - Document ID: US20230054350A1 - Status: Published application - Kind: A1 - Application number: 17/890,879 - Filed: 2022-08-18 - Published: 2023-02-23 - Earliest claimed: 2021-08-19 - Assignees: Venn Technology Corporation - Applicants: Venn Technology Corporation - Inventors: Aleksandr Osipov; Jacob Kazakevich; David Matalon; Alexander Chermyanin; Aleksandr Sedunov - Web page: https://patentgrep.com/patent/US20230054350A1 ## CPC - G06F 21/53: by executing in a restricted environment, e.g. sandbox or secure virtual machine - G06F 3/04817: using icons (graphical or visual programming using iconic symbols G06F8/34) - G06F 9/547: {Remote procedure calls [RPC]; Web services} - G06F 21/16: Program or content traceability, e.g. by watermarking - G06F 21/316: {by observing the pattern of computer usage, e.g. typical user behaviour} - G06F 21/577: {Assessing vulnerabilities and evaluating computer system security} - H04L 63/10: {for controlling access to devices or network resources} - H04L 63/101: {Access control lists [ACL]} - H04L 63/102: {Entity profiles} - H04L 63/105: {Multiple levels of security} - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - H04L 63/205: {involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved (negotiation of communication capabilities H04L69/24)} - G06F 21/1063: {Personalisation} - G06F 2221/033: Test or assess software - G06F 2221/2105: Dual mode as a secondary aspect - G06F 2221/2113: Multi-level security, e.g. mandatory access control - G06F 2221/2149: Restricted operating environment - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A computer stores, within a single user account, multiple supervised computing resources and multiple additional computing resources. The multiple supervised computing resources are associated with a security policy. The computer executes a first instance of a specified application that lacks read access and lacks write access to any and all of the multiple supervised computing resources. The computer executes, simultaneously with the first instance, a second instance of the specified application that accesses at least a portion of the multiple supervised computing resources. The computer applies rules from the security policy to the second instance of the specified application while foregoing applying the rules from the security policy to the first instance of the specified application. ## Claims ### Claim 1 A method comprising: storing, within a single user account at a computing machine, multiple unsupervised computing resources and multiple supervised computing resources, wherein the multiple supervised computing resources are associated with a security policy; receiving, from a user of the computing machine, a request to access a specified supervised computing resource from among the multiple supervised computing resources; providing access to the specified supervised computing resource locally on the computing machine and directly through a native computing environment of the computing machine; causing a display unit to display, at a display position related to a region of the display unit displaying the specified supervised computing resource, an indicator that the specified supervised computing resource is associated with the security policy; and applying security rules from the security policy to the specified supervised computing resource. ### Claim 2 (depends on 1) The method of claim 1, further comprising: receiving, from the user of the computing machine, a request to access a specified unsupervised computing resource from among the multiple unsupervised computing resources; providing access to the specified unsupervised computing resource locally on the computing machine and directly through a native computing environment of the computing machine; forgoing causing the display unit to display the indicator that the specified unsupervised computing resource is associated with the security policy; and foregoing applying security rules from the security policy to the specified unsupervised computing resource. ### Claim 3 (depends on 1) The method of claim 1, wherein the multiple unsupervised computing resources are not associated with the security policy. ### Claim 4 (depends on 1) The method of claim 1, wherein an administrator computing device, external to the computing machine, has access to the multiple supervised computing resources residing at the computing machine and lacks access to the multiple unsupervised computing resources residing at the computing machine. ### Claim 5 (depends on 1) The method of claim 1, wherein the security policy comprises the security rules restricting activity of the user of the computing machine with respect to the multiple supervised computing resources. ### Claim 6 (depends on 1) The method of claim 1, wherein the security policy comprises a monitoring policy allowing a remote computing device to monitor activity of the user of the computing machine with respect to the multiple supervised computing resources. ### Claim 7 (depends on 1) The method of claim 1, wherein the multiple unsupervised computing resources and the multiple supervised computing resources reside in separate and distinct directories of a filesystem of the computing machine or of a cloud storage unit. ### Claim 8 A non-transitory machine-readable medium storing instructions that, when executed by processing circuitry, cause the processing circuitry to perform operations comprising: Storing, within a single user account at a computing machine, multiple unsupervised computing resources and multiple supervised computing resources, wherein the multiple supervised computing resources are associated with a security policy; receiving, from a user of the computing machine, a request to access a specified supervised computing resource from among the multiple supervised computing resources; providing access to the specified supervised computing resource locally on the computing machine and directly through a native computing environment of the computing machine; causing a display unit to display, at a display position related to a region of the display unit displaying the specified supervised computing resource, an indicator that the specified supervised computing resource is associated with the security policy; and applying security rules from the security policy to the specified supervised computing resource. ### Claim 9 (depends on 8) The machine-readable medium of claim 8, the operations further comprising: receiving, from the user of the computing machine, a request to access a specified unsupervised computing resource from among the multiple unsupervised computing resources; providing access to the specified unsupervised computing resource locally on the computing machine and directly through a native computing environment of the computing machine; forgoing causing the display unit to display the indicator that the specified unsupervised computing resource is associated with the security policy; and foregoing applying security rules from the security policy to the specified unsupervised computing resource. ### Claim 10 (depends on 8) The machine-readable medium of claim 8, wherein the multiple unsupervised computing resources are not associated with the security policy. ### Claim 11 (depends on 8) The machine-readable medium of claim 8, wherein an administrator computing device, external to the computing machine, has access to the multiple supervised computing resources residing at the computing machine and lacks access to the multiple unsupervised computing resources residing at the computing machine. ### Claim 12 (depends on 8) The machine-readable medium of claim 8, wherein the security policy comprises the security rules restricting activity of the user of the computing machine with respect to the multiple supervised computing resources. ### Claim 13 (depends on 8) The machine-readable medium of claim 8, wherein the security policy comprises a monitoring policy allowing a remote computing device to monitor activity of the user of the computing machine with respect to the multiple supervised computing resources. ### Claim 14 (depends on 8) The machine-readable medium of claim 8, wherein the multiple unsupervised computing resources and the multiple supervised computing resources reside in separate and distinct directories of a filesystem of the computing machine or of a cloud storage unit. ### Claim 15 A system comprising: processing circuitry; and a memory storing instructions that, when executed by processing circuitry, cause the processing circuitry to perform operations comprising: storing, within a single user account at a computing machine, multiple unsupervised computing resources and multiple supervised computing resources, wherein the multiple supervised computing resources are associated with a security policy; receiving, from a user of the computing machine, a request to access a specified supervised computing resource from among the multiple supervised computing resources; providing access to the specified supervised computing resource locally on the computing machine and directly through a native computing environment of the computing machine; causing a display unit to display, at a display position related to a region of the display unit displaying the specified supervised computing resource, an indicator that the specified supervised computing resource is associated with the security policy; and applying security rules from the security policy to the specified supervised computing resource. ### Claim 16 (depends on 15) The system of claim 15, the operations further comprising: receiving, from the user of the computing machine, a request to access a specified unsupervised computing resource from among the multiple unsupervised computing resources; providing access to the specified unsupervised computing resource locally on the computing machine and directly through a native computing environment of the computing machine; forgoing causing the display unit to display the indicator that the specified unsupervised computing resource is associated with the security policy; and foregoing applying security rules from the security policy to the specified unsupervised computing resource. ### Claim 17 (depends on 15) The system of claim 15, wherein the multiple unsupervised computing resources are not associated with the security policy. ### Claim 18 (depends on 15) The system of claim 15, wherein an administrator computing device, external to the computing machine, has access to the multiple supervised computing resources residing at the computing machine and lacks access to the multiple unsupervised computing resources residing at the computing machine. ### Claim 19 (depends on 15) The system of claim 15, wherein the security policy comprises the security rules restricting activity of the user of the computing machine with respect to the multiple supervised computing resources. ### Claim 20 (depends on 15) The system of claim 15, wherein the security policy comprises a monitoring policy allowing a remote computing device to monitor activity of the user of the computing machine with respect to the multiple supervised computing resources.