SECURE DATA CONTAINER FOR WEB APPLICATIONS

• US 20140090009A1
• Filed: 09/27/2012
• Published: 03/27/2014
• Est. Priority Date: 09/27/2012
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Li, Hong, Wouhaybi, Rita H., Kohlenberg, Tobias M., Ross, Alan D.
• Granted Patent: US 9,245,144 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/50 Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6263 during internet communication, e.g. revealing personal data from cookies
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

Systems and methods may provide for identifying web content and detecting an attempt by the web content to access a local data store. Additionally, a determination may be made as to whether to permit the attempt based on a context-based security policy. In one example, the context-based security policy is obtained from one or more of a user profile, a multi-user data source and a cloud service.

Claims

1. An apparatus comprising:

a web application interface to identify web content and detect an attempt by the web content to access a local data store; and

an enforcement module to determine whether to permit the attempt based on a context-based security policy.

2. The apparatus of claim 1, wherein the enforcement module is to obtain the context-based security policy from one or more of a user profile, a multi-user data source and a cloud service.

3. The apparatus of claim 2, wherein the context-based security policy is to identify one or more of a type of content, a content source and a browsing sequence.

4. The apparatus of claim 1, further including a user interface to generate a first user prompt for authorization to implement an action associated with the context-based security policy.

5. The apparatus of claim 4, wherein the first user prompt is to include one or more multi-user statistics.

6. The apparatus of claim 4, wherein the user interface is to receive a first user response to the first user prompt and generate a second user prompt for a reason associated with the first user prompt.

7. The apparatus of claim 6, wherein the user interface is to receive a second user response to the second user prompt and transmit the first user response and the second user response to a multi-user data source.

8. The apparatus of claim 1, further including the local data store.

9. At least one computer readable storage medium comprising a set of instructions which, if executed by a processor, cause a computing device to:

identify web content;

detect an attempt by the web content to access a local data store; and

determine whether to permit the attempt based on a context-based security policy.

10. The at least one medium of claim 9, wherein the instructions, if executed, cause a computing device to obtain the context-based security policy from one or more of a user profile, a multi-user data source and a cloud service.

11. The at least one medium of claim 10, wherein the context-based security policy is to identify one or more of a type of content, a content source and a browsing sequence.

12. The at least one medium of claim 9, wherein the instructions, if executed, cause a computing device to generate a first user prompt for authorization to implement an action associated with the context-based security policy.

13. The at least one medium of claim 12, wherein the first user prompt is to include one or more multi-user statistics.

14. The at least one medium of claim 12, wherein the instructions, if executed, cause a computing device to:

receive a first user response to the first user prompt; and

generate a second user prompt for a reason associated with the first user response.

15. The at least one medium of claim 14, wherein the instructions, if executed, cause a computing device to:

receive a second user response to the second user prompt; and

transmit the first user response and the second user response to a multi-user data source.

16. A method comprising:

identifying web content;

detecting an attempt by the web content to access a local data store; and

determining whether to permit the attempt based on a context-based security policy.

17. The method of claim 16, further including obtaining the context-based security policy from one or more of a user profile, a multi-user data source and a cloud service.

18. The method of claim 17, wherein the context-based security policy identifies one or more of a type of content, a content source and a browsing sequence.

19. The method of claim 16, further including generating a first user prompt for authorization to implement an action associated with the context-based security policy.

20. The method of claim 19, wherein the first user prompt includes one or more multi-user statistics.

21. The method of claim 19, further including:

receiving a first user response to the first user prompt; and

generating a second user prompt for a reason associated with the first user response.

22. The method of claim 21, further including:

receiving a second user response to the second user prompt; and

transmitting the first user response and the second user response to a multi-user data source.