Back to results
US 7,849,512 B2Granted
Method and system to create secure virtual project room
AssigneeFortressware, Inc.
InventorsAnnsheng Chien Ting, Tipin Chang
Life of this patent
Estimating the term…
Abstract
A method and system for creating secure virtual project rooms is provided. The system creates a security focused development infrastructure to augment existing planning tools, existing development environment, and provide analytics for adjusting the plans to carry out a secure distributed project development.
Claims23
A method of securing a distributed project environment on a client side computing device in a secure project room system, the method comprising:
- defining a particular secure project on the computing device, the particular secure project including a plurality of pieces of content of the project where the content is secured so that only a user with a proper access privilege can access the content, one or more validated applications that are validated for use with the particular secure project wherein the one or more validated applications are configured for the particular secure project to be able to access and copy the secure content and an access policy for a set of users;
- accessing, using one of the validated applications, the secured content by a user that is a member of the access policy wherein the content is decrypted while being accessed by the validated application;
- verifying, using an access policy manager of the secure project room system, when a piece of content is accessed by an application, that the application is a validated application;
- monitoring, during the period when the piece of content is decrypted, using the access policy manager of the secure project room system, the operations of the computing device that are capable of producing one of a complete copy and a partial copy of the piece of content;
- disallowing, when a copy operation of the content by the application on the client side device is detected by the access policy manager of the secure project room system, the copy operation if the application is not a validated application;
- disallowing by the access policy manager of the secure project room system, when the application on the client side is trying to copy the piece of content to a location that is not within the particular secure project room, the copying of the piece of content by the application;
- and
- copying, on the client side computing device, if the copy operation is allowed the piece of content within the particular secure project so that the copied piece of content is stored in secured format.
5 more elements
An apparatus for securing a distributed project environment on a client side computing device in a secure project room system, the apparatus comprising:
- one or more applications executed by a processing unit of the client side computing device that perform operations on a secure project in the distributed project environment;
- an operating system executed by the processing unit of the client side computing device;
- a supervisor unit in the client side computing device being executed by the processing unit of the client side computing device, the supervisor unit in between the one or more applications and the operating system to maintain the security of the secure project, the secure project including a plurality of pieces of content of the secure project where the content is secured so that only a user with a proper access privilege can access the content, one or more validated applications that are validated for use with the secure project to access and copy the secure content and an access policy for a set of users associated with the secure project that defines access privileges of each user;
- the supervisor unit further comprising means for accessing, using one of the validated applications, the secured content by a user in access policy wherein the content is decrypted while being accessed by the validated application, means for verifying, when a piece of content is accessed by an application, that the application is a validated application, means for monitoring, during the period when the piece of content is decrypted, operations of the computing device that are capable of producing one of a complete copy and a partial copy of the piece of content, means for disallowing, when a copy operation of the content by the application on the client side device is detected, the copy operation if the application is not a validated application, means for disallowing, when the application on the client side is trying to copy the piece of content to a location that is not within the particular secure project room, the copying of the piece of content by the application and means for copying if the copy operation is allowed, the piece of content within the particular secure project so that the copied piece of content is stored in secured format.
1 more element
Dependencies are inferred from the claim text.