Browser with dual scripting engine for privacy protection

• US 9,258,136 B2
• Filed: 01/13/2010
• Issued: 02/09/2016
• Est. Priority Date: 01/19/2009
• Status: Active Grant

• Current Assignee: Koninklijke Philips Electronics N.V. (Koninklijke Philips N.V.)
• Original Assignee: Koninklijke Philips N.V.
• Inventors: Verschoor, Michael Petrus Franciscus, Dees, Walter
• Primary Examiner(s): Brown, Christopher
• Assistant Examiner(s): Baum, Ronald
• Application Number:
  US13/143,573
• Publication Number:
  US 20110283363A1
• Time in Patent Office: 2,218 Days
• Field of Search: 726/26
• US Class Current: 1/1
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: H04L 12/2814 Exchanging control software or macros for controlling appliance services in a home automation network arrangements for maintenance or administration involving configuration of the network and network elements H04L41/08
• CPC Class Codes: H04L 12/2818 from a device located outside both the home and the home network access arrangements H04L12/2856; for remote control or remote monitoring of applications H04L67/025; arrangements for transmitting signals characterised by the use of a wireless eletrical link G08C17/00; telephonic communication systems adapted for combination with remote control systems H04M11/007
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

A data processing system has a browser with scripting engine means for executing a script. The scripting engine means implements a public scripting engine and a private scripting engine. The browser is configured to have the script executed by the public scripting engine if the script does not require access to a pre-determined resource at the system. The browser is configured to have the script executed by the private scripting engine if the script requires access to the pre-determined resource. Only the private scripting engine has an interface for enabling the script to access the predetermined resource. The scripting engine means is configured to prevent the private scripting engine from communicating data to the public scripting engine or to a non-approved server external to the data processing system.

Claims

1. A data processing system comprising:

a private resource;

a connection to a public network;

a hardware processor configured to process a public script instance and a distinct private script instance of a scripting engine while providing access to the private resource; and

a memory configured to provide a browser environment, the browser environment configured to enable execution of;

(i) the public script instance of the scripting engine, including allowing access to the public network when the public script instance of the scripting engine does not require access to the private resource; and

(ii) the private script instance of the scripting engine as a plug-in to the browser, the private script instance of the scripting engine requiring access to the private resource including allowing access to the private resource when the access to the public network is denied;

wherein the browser is configured with a data communication plug-in interface to allow communication from the public script instance of the scripting engine to the private script instance of the scripting engine, and to prevent communication from the private script instance of the scripting engine to the public script instance of the scripting engine unless there is a prior approval; and

wherein only the private script instance of the scripting engine comprises a scripting API configured to enable access to the private resource.

2. The data processing system of claim 1, further comprising an interface to one or more of local storage devices, a reader for a removable memory, a reader for removable storage devices, a home network comprising one or more home network storage devices, and a WAN network including at least one server comprising one or more WAN network storage devices.

3. The data processing system of claim 2, wherein the private resource is selected from at least one of the local storage devices, the removable memory, the removable storage devices, the home network storage devices, and the WAN network storage devices.

4. A data processing system comprising:

a private resource;

a connection to a public network; and

a hardware processor configured to;

(i) process an operating system environment;

(ii) execute a scripting engine having a public script instance and a distinct private script instance within the operating system environment; and

(iii) provide access to private resources and the public network;

wherein the operating system environment is configured to enable execution of;

(i) the public script instance of the scripting engine including allowing access to the public network when the public script instance of the scripting engine does not require access to the private resources; and

(ii) the private script instance of the scripting engine requiring access to the private resources including allowing access to the private resources when the access to the public network is denied;

wherein the operating system is configured with a data communication interface to allow communication from the public script instance of the scripting engine to the private script instance of the scripting engine, and to prevent communication from the private script instance of the scripting engine to the public script instance of the scripting engine unless there is a prior approval; and

wherein only the private script instance of the scripting engine comprises a scripting API configured to enable access to the private resource.

5. A non-transitory computer readable medium comprising computer-executable instructions which, upon execution on a processor performs a method of executing a scripting engine, the method comprising acts of:

configuring the processor to process a runtime browser;

executing a public instance of the scripting engine and a distinct private script instance of the scripting engine within the browser environment; and

providing access to a private resource, wherein only the private script instance of the scripting engine includes an interface for access to the private resources;

wherein the browser environment is configured to enable execution of;

(i) the public script instance of the scripting engine including allowing access to the public network when the public script instance of the scripting engine does not require access to the private resource; and

(ii) the private script instance of the scripting engine requiring access to the private resources including allowing access to the private resource when the access to the public network is denied;

wherein the browser environment is configured with a data communication plug-in interface to allow communication from the public script instance of the scripting engine to the private script instance of the scripting engine, and to prevent communication from the private script instance of the scripting engine to the public script instance of the scripting engine unless there is a prior approval; and

wherein the private script instance of the scripting engine comprises a scripting API configured to enable access to the private resource.

6. A method for execution of a scripting engine, the method comprising acts of:

providing an operating system environment on a processor having access to a private resource;

executing a public script instance and a distinct private script instance of the scripting engine on the processor within the operating system environment for enabling execution of;

(i) the public script instance of the scripting engine including allowing access to the public network when the public script instance of the scripting engine does not require access to the private resource; and

(ii) the private script instance of the scripting engine requiring access to the private resource including allowing access to the private resource when the access to the public network is denied;

wherein the operating system environment is configured with a data communication interface to allow communication from the public script instance of the scripting engine to the private script instance of the scripting engine, and to prevent communication from the private script instance of the scripting engine to the public script instance of the scripting engine unless there is a prior approval; and

wherein only the private script instance includes an interface for access to the private resource.