Secure desktop applications for an open computing platform
AssigneeAT&T Intellectual Property I, L.P.
InventorsDeepak Chawla, Urs A. Muller
Life of this patent
Estimating the term…
Abstract
Example secure desktop applications for an open computing platform are disclosed. An example secure desktop method for a computing platform disclosed herein comprises establishing a secure communication connection between a secure desktop provided by the computing platform and a trusted entity, the secure communication connection being accessible to a trusted application authenticated with the secure desktop, the secure communication connection being inaccessible to an untrusted application not authenticated with the secure desktop, and securing data that is stored by the secure desktop in local storage associated with the computing platform, the stored data being accessible to the trusted application and inaccessible to the untrusted application.
Claims18
A method for a computing platform, the method comprising:
- establishing a secure communication connection between a secure desktop provided by the computing platform and a trusted entity, the secure communication connection being accessible to a trusted application authenticated with the secure desktop, the secure communication connection being inaccessible to an untrusted application not authenticated with the secure desktop;
- securing, with a set of encryption keys, stored data that is related to the trusted entity and stored by the secure desktop in local storage associated with the computing platform, the stored data being accessible to the trusted application and inaccessible to the untrusted application;
- and
- after the secure communication connection is terminated, waiting to revoke the set of encryption keys until the secure desktop has been terminated to permit the stored data related to the trusted entity to be accessed after the secure communication connection is terminated but while the secure desktop remains active.
A tangible computer readable medium including computer readable instructions which, when executed, cause a processor to perform operations comprising:
- establishing a secure communication connection between a secure desktop provided by a computing platform and a trusted entity, the secure communication connection being accessible to a trusted application authenticated with the secure desktop, the secure communication connection being inaccessible to an untrusted application not authenticated with the secure desktop;
- securing, with a set of encryption keys, stored data that is related to the trusted entity and stored by the secure desktop in local storage associated with the computing platform, the stored data being accessible to the trusted application and inaccessible to the untrusted application;
- and
- after the secure communication connection is terminated, waiting to revoke the set of encryption keys until the secure desktop has been terminated to permit the stored data related to the trusted entity to be accessed after the secure communication connection is terminated but while the secure desktop remains active.
A computing platform comprising:
- memory including computer readable instructions;
- and
- a processor to execute the computer readable instructions to perform operations including:
- establishing a secure communication connection between a secure desktop provided by the computing platform and a trusted entity, the secure communication connection being accessible to a trusted application authenticated with the secure desktop, the secure communication connection being inaccessible to an untrusted application not authenticated with the secure desktop;
- securing, with a set of encryption keys, stored data that is related to the trusted entity and stored by the secure desktop in local storage associated with the computing platform, the stored data being accessible to the trusted application and inaccessible to the untrusted application;
- and
- after the secure communication connection is terminated, waiting to revoke the set of encryption keys until the secure desktop has been terminated to permit the stored data related to the trusted entity to be accessed after the secure communication connection is terminated but while the secure desktop remains active.
Dependencies are inferred from the claim text.