Transparent execution of secret content

Patent metadata

Field	Value
Publication number	US-2016147982-A1
Application number	US-201414550959-A
Country	US
Kind code	A1
Filing date	Nov 22, 2014
Priority date	Nov 22, 2014
Publication date	May 26, 2016
Grant date	—

Abstract

The present application is directed to transparent execution of secret content. A device may be capable of downloading content that may include at least one secret portion, wherein any secret portions of the content may be directed to a secure workplace in the device not accessible to device operating system components, applications, users, etc. The device may then present the content in a manner that allows secret portions of the content to be executed without direct access. For example, the device may download content, and a director module in the device may direct any secret portions of the downloaded content to a secure workspace. During execution of the content, any inputs required by the secret portions may be provided to the secure workspace, and any resulting outputs from the secret portions may then be used during content presentation.

First claim

What is claimed:

1 . A device for transparently executing secret portions of content, comprising:
a communication module to interact with at least a remote resource; a content presentation module to at least cause content received from the remote resource via the communication module to be presented by the device; a secure workspace to execute at least one secret portion of the content; and a director module to direct the at least one secret portion of the content to be loaded into the secure workspace.

2 . The device of claim 1 , wherein the content presentation module is further to cause the communication module to request the content from the remote resource.

3 . The device of claim 1 , wherein the content presentation module comprises a web browser.

4 . The device of claim 1 , wherein the director module is to direct the at least one secret portion of the content to be loaded into the secure workspace based on at least one of a name, type or attribute associated with the at least one secret portion of the content.

5 . The device of claim 4 , wherein the attribute associated with the secret portion of the content is an element attribute as defined in Hypertext Markup Language (HTML).

6 . The device of claim 1 , wherein the director module is further to indicate to the content presentation module that the at least one secret portion of the content is loaded in the secure workspace.

7 . The device of claim 1 , wherein the at least one secret portion of the content loaded in the secure workspace is inaccessible to the content presentation module.

8 . The device of claim 1 , wherein in executing the at least one secret portion of the content the secure workspace is to:
receive at least one input from the content presentation module; generate at least one output by executing the at least one secret portion of the content in the secure workspace utilizing the at least one input; and provide the at least one output to the content presentation module.

9 . A method for transparently executing secret portions of content, comprising:
receiving content from a remote resource into a device; determining whether any portions of the content are secret; directing any portions of content determined to be secret into a secure workspace in the device; and executing the content in the device, wherein any secret portions of the content are executed within the secure workspace.

10 . The method of claim 9 , further comprising:
requesting the content from the remote resource.

11 . The method of claim 9 , wherein the content is executed in the device using a web browser.

12 . The method of claim 9 , wherein the at least one secret portion of the content is directed to be loaded into the secure workspace based on at least one of a name, type or attribute associated with the at least one secret portion of the content.

13 . The method of claim 12 , wherein the attribute associated with the secret portion of the content is an element attribute as defined in Hypertext Markup Language (HTML).

14 . The method of claim 9 , further comprising:
indicating to a content presentation module in the device that any secret portions of the content are loaded in the secure workspace.

15 . The method of claim 14 , wherein any secret portions of the content loaded in the secure workspace are inaccessible to the content presentation module.

16 . The method of claim 14 , wherein executing any secret portions of the content within the secure workspace comprises:
receiving at least one input from the content presentation module; generating at least one output by executing the at least one secret portion of the content in the secure workspace utilizing the at least one input; and providing the at least one output to the content presentation module.

17 . At least one machine-readable storage medium having stored thereon, individually or in combination, instructions for transparently executing secret portions of content that, when executed by one or more processors, cause the one or more processors to:
receive content from a remote resource into a device; determine whether any portions of the content are secret; direct any portions of content determined to be secret into a secure workspace in the device; and execute the content in the device, wherein any secret portions of the content are executed within the secure workspace.

18 . The medium of claim 17 , further comprising instructions that, when executed by one or more processors, cause the one or more processors to:
request the content from the remote resource.

19 . The medium of claim 17 , wherein the content is executed in the device using a web browser.

20 . The medium of claim 17 , wherein the at least one secret portion of the content is directed to be loaded into the secure workspace based on at least one of a name, type or attribute associated with the at least one secret portion of the content.

21 . The medium of claim 20 , wherein the attribute associated with the secret portion of the content is an element attribute as defined in Hypertext Markup Language (HTML).

22 . The medium of claim 17 , further comprising instructions that, when executed by one or more processors, cause the one or more processors to:
indicate to a content presentation module in the device that any secret portions of the content are loaded in the secure workspace.

23 . The medium of claim 22 , wherein any secret portions of the content loaded in the secure workspace are inaccessible to the content presentation module.

24 . The medium of claim 22 , wherein the instructions for executing any secret portions of the content within the secure workspace comprise instructions that, when executed by one or more processors, cause the one or more processors to:
receive at least one input from the content presentation module; generate at least one output by executing the at least one secret portion of the content in the secure workspace utilizing the at least one input; and provide the at least one output to the content presentation module.

Assignees

• Intel Corp

Inventors

• Sedayao Jeffrey C
• Jibaja Ivan
• Varadarajan Srikanth
• Lal Reshma
• Desai Soham Jayesh

Classifications

• G06F21/128 Primary

  involving web programs, i.e. using technology especially used in internet, generally interacting with a web browser, e.g. hypertext markup language [HTML], applets, java · CPC title

• G06F21/84 Primary

  output devices, e.g. displays or monitors · CPC title

• G06F2221/2125

  Just-in-time application of countermeasures, e.g., on-the-fly decryption, just-in-time obfuscation or de-obfuscation · CPC title

• G06F21/10 Primary

  Protecting distributed programs or content, e.g. vending or licensing of copyrighted material (protection in video systems or pay television H04N7/16) {; Digital rights management [DRM]} · CPC title

• G06F21/123

  by using dedicated hardware, e.g. dongles, smart cards, cryptographic processors, global positioning systems [GPS] devices · CPC title