System and method for platform independent desktop lockdown

• US 7,203,905 B2
• Filed: 12/17/2002
• Issued: 04/10/2007
• Est. Priority Date: 12/17/2002
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Cooper, Michael Richard, Ravi, Kumar, Brockway, Brandon, Kersten, Jason Robert
• Primary Examiner(s): An; Meng-Al T.
• Assistant Examiner(s): Kang; Insun
• Application Number:
  US10/322,094
• Publication Number:
  US 20040113940A1
• Time in Patent Office: 1,575 Days
• Field of Search: 717/176, 709/223, 719/319
• US Class Current: 715/741
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems

Abstract

A system and method that provides a platform-neutral shell application for a user interface is provided. The platform neutral shell application is performed in a way that prevents the user from accessing the underlying operating system. The desktop shell application executes in a middleware application. The operating system residing on the client computer system is booted. The middleware application is loaded on the operating system platform. The middleware application is programmed for the particular operating system being used by the client. The shell application is loaded on the middleware application. The shell application prevents the user from accessing the underlying operating system by maximizing the window in which the shell application is running, pinning the shell application window to the foreground, and removing controls from the desktop window would otherwise allow the user to bypass the desktop shell.

Claims

1. A method of locking a desktop shell that is executable on a plurality of operating system platforms, said method comprising:

booting one of the operating system platforms on a computer system;

loading a virtual machine middleware application on the booted operating system platform, wherein the virtual machine middleware application runs platform-neutral and native applications; and

invoking a lockdown desktop shell application in the virtual machine middleware application, wherein invoking the lockdown desktop shell application includes preventing a user of the computer system from directly accessing the booted operating system platform by performing the following;

maximizing a window corresponding to the lockdown desktop shell application;

removing window resize and window exit controls from the window; and

pinning the window to the foreground of a desktop window controlled by the booted operating system platform.

2. The method as described in claim 1 wherein the virtual machine middleware application is a Java virtual machine and wherein the lockdown desktop shell application is a Java application.

3. The method as described in claim 1 further comprising:

displaying the window corresponding to the lockdown desktop shell application on a display device accessible from the computer system, wherein the displayed window is substantially the same in appearance when displayed on any of the plurality of operating system platforms.

4. The method as described in claim 1 further comprising:

receiving a user identifier and a password from the user; and

authenticating the user identifier and password before allowing the user to use the lockdown desktop shell application.

5. The method as described in claim 4 further comprising:

receiving one or more self-contained desktops from a server in response to the authenticating, wherein each of the self-contained desktops include one or more desktop components; and

displaying, on the lockdown desktop shell application, graphical images corresponding to one or more of the desktop components.

6. The method as described in claim 4 further comprising:

receiving the lockdown desktop shell application from a server in response to the authenticating.

7. An information handling system comprising:

one or more processors;

a memory area accessible by the processors;

a nonvolatile storage device accessible by the processors;

a display device accessible by the processors;

an operating system executed by the processors for managing the information handling system;

a virtual machine middleware application running on the operating system;

a locking tool for displaying a lockdown desktop shell application, the locking tool including;

means for booting the operating system;

means for loading a virtual machine middleware application on the operating system, wherein the virtual machine middleware application runs platform-neutral applications; and

means for invoking a lockdown desktop shell application in the virtual machine middleware application, wherein the lockdown desktop shell includes means for preventing a user of the computer system from directly accessing the operating system, wherein the means for preventing includes;

means for maximizing a window corresponding to the lockdown desktop shell application;

means for removing window resize and window exit controls from the window; and

means for pinning the window to the foreground of a desktop window controlled by the booted operating system platform.

8. The information handling system as described in claim 7 wherein the virtual machine middleware application is a Java virtual machine and wherein the lockdown desktop shell application is a Java application.

9. The information handling system as described in claim 7 further comprising:

means for displaying the window corresponding to the lockdown desktop shell application on a display device accessible from the computer system, wherein the displayed window is substantially the same in appearance when displayed on any of a plurality of operating system platforms.

10. The information handling system as described in claim 8 further comprising:

means for receiving a user identifier and a password from the user; and

means for authenticating the user identifier and password before allowing the user to use the lockdown desktop shell application.

11. The information handling system as described in claim 10 further comprising:

means for receiving one or more self-contained desktops from a server in response to the authenticating, wherein each of the self-contained desktops include one or more desktop components; and

means for displaying, on the lockdown desktop shell application, graphical images corresponding to one or more of the desktop components.

12. The information handling system as described in claim 10 further comprising:

means for receiving the lockdown desktop shell application from a server in response to the authenticating.

13. A computer program product stored on a computer storage medium, the computer storage medium containing instructions for execution by a computer, which, when executed by the computer, cause the computer to execute a method for locking a desktop shell that is executable on a plurality of operating system platforms, said method comprising:

booting one of the operating system platforms on a computer system;

loading a virtual machine middleware application on the booted operating system platform, wherein the virtual machine middleware application runs platform-neutral applications; and

invoking a lockdown desktop shell application in the virtual machine middleware application, wherein invoking the lockdown desktop shell application includes preventing a user of the computer system from directly accessing the booted operating system platform by performing the following;

maximizing a window corresponding to the lockdown desktop shell application;

removing window resize and window exit controls from the window; and

pinning the window to the foreground of a desktop window controlled by the booted operating system platform.

14. The computer program product as described in claim 13 wherein the virtual machine middleware application is a Java virtual machine and wherein the lockdown desktop shell application is a Java application.

15. The computer program product as described in claim 13 wherein the method further comprises:

displaying the window corresponding to the lockdown desktop shell application on a display device accessible from the computer system, wherein the displayed window is substantially the same in appearance when displayed on any of the plurality of operating system platforms.

16. The computer program product as described in claim 13 wherein the method further comprises:

receiving a user identifier and a password from the user; and

authenticating the user identifier and password before allowing the user to use the lockdown desktop shell application.

17. The computer program product as described in claim 16 wherein the method further comprises:

receiving one or more self-contained desktops from a server in response to the authenticating, wherein each of the self-contained desktops include one or more desktop components; and

displaying, on the lockdown desktop shell application, graphical images corresponding to one or more of the desktop components.

18. The computer program product as described in claim 16 wherein the method further comprises:

receiving the lockdown desktop shell application from a server in response to the authenticating.