Browser with dual scripting engine for privacy protection

Patent metadata

Field	Value
Publication number	US-9258136-B2
Application number	US-201013143573-A
Country	US
Kind code	B2
Filing date	Jan 13, 2010
Priority date	Jan 19, 2009
Publication date	Feb 9, 2016
Grant date	Feb 9, 2016

Abstract

A data processing system has a browser with scripting engine means for executing a script. The scripting engine means implements a public scripting engine and a private scripting engine. The browser is configured to have the script executed by the public scripting engine if the script does not require access to a pre-determined resource at the system. The browser is configured to have the script executed by the private scripting engine if the script requires access to the pre-determined resource. Only the private scripting engine has an interface for enabling the script to access the predetermined resource. The scripting engine means is configured to prevent the private scripting engine from communicating data to the public scripting engine or to a non-approved server external to the data processing system.

First claim

The invention claimed is:

1. A data processing system comprising:
a private resource;
a connection to a public network;
a hardware processor configured to process a public script instance and a distinct private script instance of a scripting engine while providing access to the private resource; and
a memory configured to provide a browser environment, the browser environment configured to enable execution of: (i) the public script instance of the scripting engine, including allowing access to the public network when the public script instance of the scripting engine does not require access to the private resource; and (ii) the private script instance of the scripting engine as a plug-in to the browser, the private script instance of the scripting engine requiring access to the private resource including allowing access to the private resource when the access to the public network is denied;
wherein the browser is configured with a data communication plug-in interface to allow communication from the public script instance of the scripting engine to the private script instance of the scripting engine, and to prevent communication from the private script instance of the scripting engine to the public script instance of the scripting engine unless there is a prior approval; and
wherein only the private script instance of the scripting engine comprises a scripting API configured to enable access to the private resource.

2. The data processing system of claim 1 , further comprising an interface to one or more of local storage devices, a reader for a removable memory, a reader for removable storage devices, a home network comprising one or more home network storage devices, and a WAN network including at least one server comprising one or more WAN network storage devices.

3. The data processing system of claim 2 , wherein the private resource is selected from at least one of the local storage devices, the removable memory, the removable storage devices, the home network storage devices, and the WAN network storage devices.

4. A data processing system comprising:
a private resource;
a connection to a public network; and
a hardware processor configured to: (i) process an operating system environment; (ii) execute a scripting engine having a public script instance and a distinct private script instance within the operating system environment; and (iii) provide access to private resources and the public network;
wherein the operating system environment is configured to enable execution of: (i) the public script instance of the scripting engine including allowing access to the public network when the public script instance of the scripting engine does not require access to the private resources; and (ii) the private script instance of the scripting engine requiring access to the private resources including allowing access to the private resources when the access to the public network is denied;
wherein the operating system is configured with a data communication interface to allow communication from the public script instance of the scripting engine to the private script instance of the scripting engine, and to prevent communication from the private script instance of the scripting engine to the public script instance of the scripting engine unless there is a prior approval; and
wherein only the private script instance of the scripting engine comprises a scripting API configured to enable access to the private resource.

5. A non-transitory computer readable medium comprising computer-executable instructions which, upon execution on a processor performs a method of executing a scripting engine, the method comprising acts of:
configuring the processor to process a runtime browser;
executing a public instance of the scripting engine and a distinct private script instance of the scripting engine within the browser environment; and
providing access to a private resource, wherein only the private script instance of the scripting engine includes an interface for access to the private resources;
wherein the browser environment is configured to enable execution of: (i) the public script instance of the scripting engine including allowing access to the public network when the public script instance of the scripting engine does not require access to the private resource; and (ii) the private script instance of the scripting engine requiring access to the private resources including allowing access to the private resource when the access to the public network is denied;
wherein the browser environment is configured with a data communication plug-in interface to allow communication from the public script instance of the scripting engine to the private script instance of the scripting engine, and to prevent communication from the private script instance of the scripting engine to the public script instance of the scripting engine unless there is a prior approval; and
wherein the private script instance of the scripting engine comprises a scripting API configured to enable access to the private resource.

6. A method for execution of a scripting engine, the method comprising acts of:
providing an operating system environment on a processor having access to a private resource;
executing a public script instance and a distinct private script instance of the scripting engine on the processor within the operating system environment for enabling execution of: (i) the public script instance of the scripting engine including allowing access to the public network when the public script instance of the scripting engine does not require access to the private resource; and (ii) the private script instance of the scripting engine requiring access to the private resource including allowing access to the private resource when the access to the public network is denied;
wherein the operating system environment is configured with a data communication interface to allow communication from the public script instance of the scripting engine to the private script instance of the scripting engine, and to prevent communication from the private script instance of the scripting engine to the public script instance of the scripting engine unless there is a prior approval; and
wherein only the private script instance includes an interface for access to the private resource.

Assignees

• Verschoor Michael Petrus Franciscus
• Dees Walter
• Koninkl Philips Nv

Inventors

• Verschoor Michael Petrus Franciscus
• Dees Walter

Classifications

• H04L63/10

  for controlling access to devices or network resources · CPC title

• H04L63/04

  for providing a confidential data exchange among entities communicating through data packet networks · CPC title

• H04L12/2818 Primary

  from a device located outside both the home and the home network (access arrangements H04L12/2856; for remote control or remote monitoring of applications H04L67/025; arrangements for transmitting signals characterised by the use of a wireless eletrical link G08C17/00; telephonic communication systems adapted for combination with remote control systems H04M11/007) · CPC title

• G06F21/53 Primary

  by executing in a restricted environment, e.g. sandbox or secure virtual machine · CPC title

• G06F2221/2105

  Dual mode as a secondary aspect · CPC title