Secure data management

• US 9,355,261 B2
• Filed: 03/14/2013
• Issued: 05/31/2016
• Est. Priority Date: 03/14/2013
• Status: Active Grant

• Current Assignee: Ivanti, Inc. (Ivanti Software, Inc.)
• Original Assignee: Appsense Incorporated
• Inventors: Walton, Travis, Somerfield, Richard James, Delivett, Paul
• Primary Examiner(s): Garca Cervetti, David
• Assistant Examiner(s): LE, KHOI V
• Application Number:
  US13/829,018
• Publication Number:
  US 20140282820A1
• Time in Patent Office: 1,174 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems

Abstract

The disclosed subject matter includes a method. The method includes determining, by a module running on a computer platform in communication with non-transitory computer readable medium having a plurality of security zones, whether an application instance is in a foreground of a user interface for the computer platform. The method further includes determining, by the module, an alert level associated with the application instance in the foreground of the user interface, wherein the alert level includes at least one of a restriction level and an access level. The method also includes providing the alert level to a user of the computer platform using a visual cue displayed on the user interface.

Claims

1. An apparatus for use with a user interface, the apparatus comprising:

a non-transitory memory storing computer readable instructions; and

a processor in communication with the memory and with a non-transitory computer readable medium having a plurality of security zones, wherein the computer readable instructions are configured to cause the processor to;

determine whether an application instance is in a foreground of the user interface;

when the application instance is in the foreground of the user interface, determine an alert level associated with the application instance, wherein the alert level includes at least one of a restriction level and an access level,

wherein the restriction level is determined based on previous security zones that have been accessed by the application instance, and

wherein the access level is determined based on security zones that are currently accessed by the application instance; and

provide the alert level to a user of the apparatus using a visual cue displayed on the user interface.

2. The apparatus of claim 1, wherein the non-transitory memory further comprises instructions that cause the processor to send a request to a user interface control module, operating in a kernel space of an operating system, to provide the alert level associated with the application instance.

3. The apparatus of claim 2, wherein the non-transitory memory further comprises instructions that cause the processor to send the request to the user interface control module as a system call.

4. The apparatus of claim 1, wherein the non-transitory memory further comprises instructions that cause the processor to determine whether the alert level associated with the foreground application satisfies notification criteria.

5. The apparatus of claim 4, wherein the alert level associated with the foreground application satisfies the notification criteria when the alert level is greater than a predetermined threshold.

6. The apparatus of claim 1, wherein the non-transitory memory further comprises instructions that cause the processor to modify an appearance of a status bar on the user interface.

7. The apparatus of claim 6, wherein the non-transitory memory further comprises instructions that cause the processor to display an icon, in the status bar, that is indicative of the alert level associated with the foreground application instance.

8. The apparatus of claim 6, wherein the non-transitory memory further comprises instructions that cause the processor to modify a perceived color of the status bar on the user interface.

9. A method comprising:

determining, by a module running on a computer platform in communication with non-transitory computer readable medium having a plurality of security zones, whether an application instance is in a foreground of a user interface for the computer platform;

determining, by the module, an alert level associated with the application instance in the foreground of the user interface, wherein the alert level includes at least one of a restriction level and an access level,

wherein the restriction level is determined based on previous security zones that have been accessed by the application instance,

wherein the access level is determined based on security zones that are currently accessed by the application instance; and

providing the alert level to a user of the computer platform using a visual cue displayed on the user interface.

10. The method of claim 9, wherein determining the alert level associated with the application instance comprises sending a message to a user interface control module, operating in a kernel space of an operating system for the computer system, to provide the alert level associated with the application instance.

11. The method of claim 10, wherein sending the message to the user interface control module comprises sending the message to the user interface control module as a system call.

12. The method of claim 9, further comprising determining whether the alert level associated with the foreground application satisfies predetermined notification criteria.

13. The method of claim 12, wherein the alert level satisfies the predetermined notification criteria when the alert level is greater than a predetermined threshold.

14. The method of claim 9, wherein providing the alert level to the user of the computer platform using the visual cue comprises modifying an appearance of a status bar on the user interface.

15. The method of claim 14, wherein providing the alert level using the visual cue comprises displaying an icon that is indicative of the alert level associated with the foreground application instance.

16. The method of claim 14, wherein providing the alert level using the visual cue comprises modifying a perceived color of the status bar on the user interface.

17. A non-transitory computer readable medium having executable instructions operable to cause an apparatus to:

determine whether an application instance is in a foreground of a user interface for the apparatus in communication with non-transitory computer readable medium having a plurality of security zones;

determine an alert level associated with the application instance in the foreground of the user interface, wherein the alert level includes at least one of a restriction level and an access level,

wherein the restriction level is determined based on previous security zones that have been accessed by the application instance,

wherein the access level is determined based on security zones that are currently accessed by the application instance; and

provide the alert level to a user of the apparatus using a visual cue displayed on the user interface.

18. The computer readable medium of 17, further comprising executable instructions operable to cause the apparatus to determine whether the alert level associated with the foreground application satisfies notification criteria.

19. The computer readable medium of 18, wherein the alert level associated with the foreground application satisfies the notification criteria when the alert level is greater than a predetermined threshold.

20. The computer readable medium of 17, further comprising executable instructions operable to cause the apparatus to modify a perceived color of the status bar on the user interface.