System and method of enhancing computer security by using dual desktop technologies

• US 20080126978A1
• Filed: 02/02/2007
• Published: 05/29/2008
• Est. Priority Date: 11/28/2006
• Status: Abandoned Application

• Current Assignee: Likun Bai, Wen Jie Huang
• Original Assignee: Likun Bai, Wen Jie Huang
• Inventors: Huang, Wen Jie, Bai, Likun
• Application Number:
  US11/701,487
• Publication Number:
  US 20080126978A1
• Time in Patent Office: Days
• US Class Current: 715/778
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine

Abstract

A system and method of enhancing a computer sysem secuirty provides dual desktops for one user on one computer. One desktop is assigned low privileges and is used to handle potential risky tasks.

Claims

1. A system of enhancing computer security comprising one computer having at least one monitor, an operating system and other peripherals and some software programs, said computer producing two desktops for a high privileges user account by adding a second additional desktop, one of said two desktops being given low privileges and being used to handle potential risky tasks.

2. A system as claimed in claim 1 said second additional desktop is created by running a software program having a graphic user interface which has some user interacting operation privileges.

3. A system as claimed in claim 1 said second additional desktop is created by producing an additional user account interface.

4. A system as claimed in claim 1 said computer evaluates the privilege of a user account which is being used to log in into said computer and produces said second additional desktop for high privileges user account automatically.

5. A system as claimed in claim 1 said computer creates said second additional desktop when a software program which is used to handle potential risky tasks is launched.

6. A system as claimed in claim 1 said computer creates said second additional desktop when a shortcut icon of a software program which is capable of creating a second desktop is executed.

7. A system as claimed in claim 1 said second additional desktop is created manually.

8. A system as claimed in claim 1 said computer running both a remote desktop server software program and a remote desktop client software program locally to produce a remote desktop as one of said two desktops.

9. A system as claimed in claim 1 said computer running a virtual machine software program and running two operating systems simultaneously, one is a primary operating system and the other is a second operating system, said computer also running a remote desktop server software program in said second operating system and a remote desktop client software program in said primary operating system;

said computer produces a remote desktop of said second operating system as a second additional desktop for said primary operating system.

10. A system as claimed in claim 1 further comprising an Internet Service Server running a remote desktop server software program, said computer runs a remote desktop client software program and creates a second additional desktop by creating a remote desktop of said Internet Service Server.

11. A system claimed in claim 10 wherein said computer has no connection to the Internet.

12. A system claimed in claim 10 wherein said computer has restricted access to the Internet.

13. A system claimed in claim 10 wherein said Internet Service Server uses a different operating system from said computer.

14. A system claimed in claim 10 wherein said Internet Service Server is capable of serving more than one said computer simultaneously.

15. A method of enhancing computer security comprising logging in into a computer being capable of creating two different privileges desktops for high privileges user accounts on its monitor, using one desktop being assigned low privileges to perform potential risky, network-related tasks.