Trigence Corp.

Alois Liebl

Donn Rochette

Craig MacDonald

This invention discloses a system for enabling a first software application, which is designed for execution on a first computer platform, to be executed on an incompatible computer platform in which the software application is not intended to execute. A first group of files that are distributed with or are specific to the first software application intended to run on the first computer platform are preferably isolated from other software applications by way of being capsule or encapsulated so as to provide an isolated first group of files; capsule runtime software manages a dynamic state and file location of the isolated first group of files and includes capsule runtime software including a kernel module and application libraries for modifying the behavior of the local operating system residing on the incompatible computer platform, so that execution of the first software application requires access of the isolated first group of files in place of operating system files and providing capsule specific values instead of values related to the identity of the incompatible computer platform.

System including run-time software to enable a software application to execute on an incompatible computer platform

The invention discloses a method and system for protecting a computer platform from malware. The protection is achieved by encapsulating an application that can serve as a malware conduit within a protected capsule environment, so as to prevent the conduit application or any processes originated therefrom from accessing and making changes to objects associated with an operating system (OS) of the computer platform or with other applications running on the computer platform outside of the capsule environment, thereby preventing the malware provided via the conduit application from contaminating the computer platform outside of said secure protected environment, or capsule. Capsule runtime software manages the dynamic state of the encapsulated application, and re-directs system service requests generated by the application and associated processes from OS-provided system objects to corresponding object libraries provided within the capsule object set, so that any malware induced changes remain local to the capsule. Protection of the operating system and most applications running on the computer platform is thus provided by the isolation of the conduit applications within a secure capsule environment, which can be safely removed from the computer platform, together with any changes introduced by the malware to the computer platform, without affecting the computer operation.

Growing community of inventors

New York, NY, United States of America

Alois Liebl