Back to results
US 7,624,111 B2Granted
Active content trust model
AssigneeMicrosoft Corporation
InventorsAndrew Douglas Reddish, Dale Elton Rogerson, Justin Shane McRoberts, Praful Pratap Chavda, Sridhar Chandrashekar, Wenlong Dong
Life of this patent
Estimating the term…
Abstract
An active content trust model provides security in a help system. The security is provided in response to a call from a calling application to access active content. When the call is received, a determination is made, based on predetermined criteria, which execution mode to use to access the active content. The active content is then accessed in the determined execution mode, thus providing the security.
Claims11
A computer-implemented method of providing security in a help system which teaches users how to accomplish tasks, the method comprising:
- receiving a call at the help system implemented using a processor, from a calling application, to access active content;
- using the processor to determine, based on predetermined criteria, an execution mode, from at least two execution modes including a trust mode and a safe mode, in which the active content is accessed, wherein determining the execution mode in which the active content is accessed further comprises determining whether to access the active content in the trust mode or in the safe mode, the trust mode allowing execution of code in the active content, and the safe mode statically rendering content of the active content but limiting execution of code in the active content, wherein statically rendering content of the active content comprises prohibiting invocation of shell execute content, prohibiting access to online content, and rendering titles, state probes and behaviors in a secure execution environment (SEE)-constrained environment, and wherein determining the execution mode further comprises determining a trust status of the calling application, wherein the calling application has one of a trusted application status and an untrusted application status, and further comprising using the processor to determine if the active content is electronically signed, and if the active content is electronically signed, using the processor to determine whether the active content has a valid certificate, the active content being determined to be from an untrusted source if the active content does not have a valid certificate;
- using the processor to determine, when the call is received at the help system from the calling application, whether other active content is currently being accessed in the trust mode or the safe mode;
- and
- using the processor to access the active content called by the calling application in the determined execution mode if the other active content is currently being accessed in the trust mode, and automatically accessing the active content called by the calling application in the safe mode, regardless of whether the determined execution mode is the safe mode or the trust mode, if the other active content is currently being accessed in the safe mode, to prevent an elevation of privileges of untrusted content.
2 more elements
A system for providing help to a user of a computer, the system comprising:
- a processor and associated memory storing computer executable instructions for configuring the processor to implement system components comprising:
- a help system which teaches users how to accomplish tasks and which receives a call from a calling application to access active content;
- and
- a security manager which uses a trust based security model to determine an execution mode in which the called active content is accessed based on predetermined criteria, and wherein the security manager is configured to determine whether to access the called active content in a trust mode or in a safe mode, the trust mode allowing execution of code in the called active content, and the safe mode statically rendering content of the called active content but limiting execution of code in the called active content, wherein statically rendering content of the called active content comprises prohibiting invocation of shell execute content, prohibiting access to online content, and rendering titles, state probes and behaviors in a secure execution environment (SEE)-constrained environment, wherein the security manager is further configured to determine, when the help system receives the call from the calling application to access the called active content, whether other active content is currently being accessed in the trust mode or the safe mode, the security manager allowing the called active content to be accessed in the execution mode determined based on the predetermined criteria if the other active content is currently being accessed in the trust mode, but the security manager only allowing the called active content to be accessed in the safe mode, regardless of the determination made based on the predetermined criteria, if the other active content is currently being accessed in the safe mode, in order to prevent an elevation of privileges of untrusted content, wherein the predetermined criteria include a trust status of the source of the called active content, the security manager being further configured to determine the trust status of the source of the called active content by determining if the called active content is electronically signed and has a valid certificate, the called active content being determined to be from an untrusted source if the active content is not electronically signed or does not have a valid certificate.
1 more element
Dependencies are inferred from the claim text.