Contextual virtual machines for application quarantine and assessment method and system
AssigneeAvaya Inc.
InventorDavid S. Mohler
Life of this patent
Estimating the term…
Abstract
Described are embodiments that provide for the use of multiple quarantine partitions and/or multi-partition spaces (e.g., virtual machines) for initially installing and running downloaded content. The downloaded content can be run securely in the quarantine partitions and/or multi-partition spaces. Each quarantine partition and/or multi-partition space can be configured differently with different capabilities. Based on the configuration and capabilities of the quarantine partitions and/or multi-partition spaces, the downloaded content may have limited capabilities to access secure data, applications, or other code limiting the damage that the content can potentially cause.
Claims20
A system, comprising:
- a non-transitory computer readable medium operable to store computer executable instructions;
- a processor in communication with the computer readable medium, the processor operable to execute the computer executable instructions to perform operations comprising:
- installing a same downloaded content in a plurality of multi-partition space quarantine partitions for a plurality of virtual machines stored in the computer readable medium of a computing device, wherein a first one of the plurality of multi-partition space quarantine partitions comprises a first set of capabilities that is more restrictive than a second one of the plurality of multi-partition space quarantine partitions;
- executing the downloaded content in the first one of the plurality of multi-partition space quarantine partitions and the second one of the plurality of multi-partition space quarantine partitions;
- monitoring execution of the downloaded content in the first one of the plurality of multi-partition space quarantine partitions and the second one of the plurality of multi-partition space quarantine partitions to generate monitored information;
- and
- storing the monitored information of the downloaded content in the computer readable medium.
A method for executing an application on a mobile device,
- the method comprising:
- determining a first user context of a user of the mobile device;
- installing downloaded content in a plurality of multi-partition space quarantine partitions for a plurality of virtual machines stored in a computer readable medium of the mobile device, wherein a first one of the plurality of multi-partition space quarantine partitions is associated with the first user context and a second one of the plurality of multi-partition space quarantine partitions is associated with a different user context of the user;
- executing the downloaded content in the first one of the plurality of multi-partition space quarantine partitions and the second one of the plurality of multi-partition space quarantine partitions;
- monitoring execution of the downloaded content in the first one of the plurality of multi-partition space quarantine partitions and the second one of the plurality of multi-partition space quarantine partitions to generate monitored information;
- and
- storing the monitored information of the downloaded content in a computer readable medium.
A non-transitory computer readable medium including computer executable instructions stored onto the computer readable medium which, when executed by one or more processors of a computer, causes the computer to perform operations comprising:
- determining a first user context;
- installing a downloaded content in a first plurality of multi-partition space quarantine partitions for a first plurality of virtual machines stored in a computer readable medium of the computer, wherein a first one of the plurality of the multi-partition space of quarantine partitions is associated with the first context;
- executing the first downloaded content in the first one of the plurality of the multi-partition space of quarantine partitions;
- monitoring execution of the first downloaded content in the first one of the plurality of the multi-partition space of quarantine partitions;
- storing first monitored information of the first downloaded content in a computer readable medium;
- determining a second user context;
- installing a second downloaded content in a second one of the plurality of multi-partition space quarantine partitions stored in the computer readable medium, wherein the second one of the plurality of multi-partition space quarantine partitions is associated with the second user context, wherein the first one of the plurality of multi-partition space quarantine partitions comprises a first set of capabilities that is more restrictive than a second set of capabilities of the second one of the plurality of multi-partition space quarantine partitions;
- executing the second downloaded content in the second one of the plurality of multi-partition space quarantine partitions;
- monitoring execution of the second downloaded content in the second one of the plurality of multi-partition space quarantine partitions;
- and
- storing second monitored information of the second downloaded content in the storage medium.
Dependencies are inferred from the claim text.