Symantec Corporation

Paul MacKay

Randall Richards Cook

Bill Guy Bodine

Karl Bunnell

Jared G Payne

A computer-implemented method for enforcing geolocation-based policies may include (1) identifying a request from a computing system to access a computing resource, (2) identifying a public key certificate associated with the computing resource, the public key certificate including location data that indicates where the computing resource may be accessed from, (3) determining a current location of the computing system, (4) determining that the location data within the public key certificate indicates that the computing resource may be accessed from the current location of the computing system, and (5) allowing access to the computing resource based on the determination that the computing resource may be accessed from the current location of the computing system. Various other methods, systems, and computer-readable media are also disclosed.

Systems and methods for enforcing geolocation-based policies

A computer-implemented method for replacing sensitive information stored within non-secure environments with secure references to the same may include (1) identifying sensitive information stored within a non-secure environment on a computing device, (2) removing the sensitive information from the non-secure environment, (3) storing the sensitive information within a secure environment, (4) replacing the sensitive information originally stored within the non-secure environment with a reference that identifies the sensitive information stored within the secure environment, (5) identifying a request to access at least a portion of the sensitive information identified in the reference, (6) determining that at least a portion of the request satisfies a data-loss-prevention policy, and then (7) providing access to at least a portion of the sensitive information via the secure environment. Various other systems, methods, and computer-readable media are also disclosed.

Systems and methods for replacing sensitive information stored within non-secure environments with secure references to the same

A method and apparatus for autonomously managing a computer resource using a security certificate is described. In one embodiment, the method includes identifying attribute information from secure communications within the computing environment, wherein the attribute information is associated with a trusted relationship and establishing at least one resource parameter for customizing the computer resource based on the attribute information.

Method and apparatus for autonomously managing a computer resource using a security certificate

A method for gesture-based distribution of files may include 1) receiving, at a first computing device, input that identifies a file for gesture-based distribution to one or more other computing devices; 2) detecting a plurality of additional computing devices in physical proximity of the first computing device; 3) for each computing device in the plurality of additional computing devices, determining a physical location of the additional computing device; 4) detecting, on the first computing device, a gesture of a user of the first computing device; 5) determining, based on one or more of the physical locations of the additional computing devices, that the gesture of the user was directed toward one or more of the additional computing devices; 6) distributing the file to the one or more additional computing devices toward which the user gestured. Various other methods, systems, and computer-readable media are also disclosed.

Systems and methods for gesture-based distribution of files

A system and method for opening a file in a virtualization workspace of a host computer system. The host computer system includes a virtualization workspace including a virtualization agent and virtual software layers. The virtualization agent detects a request to open a file in the virtualization workspace. In response to detecting the request, the virtualization agent determines that the file includes embedded metadata. The virtualization agent uses the embedded metadata to identify a virtual software layer in which to open the file, activates the virtual software layer, and opens the file using an application that is included in the identified virtual software layer. The virtual software layer includes one or more applications and the embedded metadata includes a signature corresponding to one of the applications with which to open the file. The identified virtual software layer is installed on the host computer system subsequent to being identified.

Method of using an encapsulated data signature for virtualization layer activation

A computer-implemented method may include identifying first and second sublayers of a virtualized application. The first and/or second virtualization sublayers may include a read-write sublayer, a read-only sublayer, a virtual-reset-point sublayer, and/or a patch sublayer. The computer-implemented method may also include merging an instance of the first virtualization sublayer with an instance of the second virtualization sublayer. Various other methods, systems, and computer-readable media are also disclosed.

Growing community of inventors

Provo, UT, United States of America

Paul MacKay