International Business Machines Corporation

Box Limited

Jonathan S Fan

Peter Benjamin Loer

Benjamin John Kus

Dennis Sidney Goodrow

Gregory Mitchell Toto

Jeremy Scott Spiegel

James B Evans

Amrit Tsering Williams

Jason E Mealins

Systems and methods for secure resource access and network communication are provided. A plurality of policies are received on a client device, each policy comprising a respective resource and a respective permission for a respective action that can be performed by a user of the client device in regards to the resource. A first application, which is configured to store data in an encrypted repository on the client device, receives a request to open a resource. The first application determines that one of the policies prohibits access by the resource to the encrypted repository and, based thereon, selects a different second application to open the resource that does not have access to the encrypted repository. The second application then opens the resource.

Systems and methods for secure resource access and network communication

A client hypervisor comprises a virtual agent that runs outside of a system OS and that allows device management independent of the OS and user. The virtual agent is tied to a device and not a specific instance of the OS. Such client hypervisors expose new functionality to ease managing systems. Some of these capabilities come from the persistence and privileges outside the OS. In some embodiments of the invention, this new management functionality is exposed to allow device management via new virtualization concepts, such as multiple VMs per system, VM replacement, snapshot/rollback, etc.

Endpoint-hosted hypervisor management

Growing community of inventors

Berkeley, CA, United States of America

Jonathan S Fan