System for selectively blocking execution of applications on a computer system
AssigneeLakeside Software, Inc.
InventorMichael K. Schumacher
Life of this patent
Estimating the term…
Abstract
The system for selectively blocking execution of applications on a computer system includes an interface that allows an administrator to set configuration settings and which includes tools that assist the administrator in establishing an application list. The application list specifies zero or more applications that are to be either blocked or that are to be allowed to run (i.e., all others to be blocked), depending on the selected configuration settings. The tools include a mechanism that automatically creates a historical database of applications that have been executed in the past on the computer system. The interface allows easy selection of applications from the historical database for inclusion on the application list.
Claims47
A method of operating a computer comprising the steps of:
- (A) tracking program files executed on the computer to thereby establish a historical database wherein the database lists program files that have executed on the computer;
- (B) using the historical database to create an application list wherein the application list defines designated program files that are permitted to execute on the computer;
- (C) detecting when a candidate program file has started execution on the computer through a detecting means independent of the candidate program file and evaluating, using the application list, whether the candidate program file is allowed to continue to execute on the computer.
A method of operating a computer comprising the steps of:
- (A) establishing an application list defining designated program files;
- (B) determining a list mode of operation wherein the determined mode is one of (i) an allowed mode of operation such that the designated program files are permitted to execute on the computer and (ii) a disallowed mode of operation such that the designated program files are blocked from executing on the computer;
- (C) detecting when a candidate program file has started execution on the computer through a detecting means that is independent of the candidate program file;
- (D) selectively controlling execution of the candidate program file in accordance with the application list and the selected mode of operation for one of continued execution or discontinued execution.
A system for blocking execution of a program file on a computer comprising:
- a processor;
- means configured to execute on the processor for tracking program files executed on the computer to thereby establish a historical database;
- means configured to execute on the processor configured to use said historical database to create an application list wherein said application list defines designated program files that are permitted to execute on the computer;
- means configured to execute on the processor for detecting when a candidate program file has started execution on the computer that is independent of the candidate program file and evaluating, using the application list, whether the candidate program file is allowed to continue to execute;
- means configured to execute on the processor for discontinuing execution of the candidate program file when said evaluation indicates that the candidate program file should not be allowed to continue to execute.
Dependencies are inferred from the claim text.