초록 ▼

A method and apparatus for improving security for a workstation accessing network resources through a web browser interface. A three step procedure is provided on the workstation for testing the origin and filetype extensions of command files, retrieved by a web browser, to determine whether they ma

A method and apparatus for improving security for a workstation accessing network resources through a web browser interface. A three step procedure is provided on the workstation for testing the origin and filetype extensions of command files, retrieved by a web browser, to determine whether they may be executed on the workstation. Step one of the invention consists of creating a non-standard command filetype extension on the workstation to be protected. This is followed by step two which isolates specific network or system resources for all approved command files. Finally, step three protects the command file contents and sub-directory locations on the protected workstation. The invention grants execute permission for an application file command files only when all three conditions of the above steps are met.

대표청구항 ▼

[ What we claim is:] [1.] A method, implemented in a computer system, for determining execution permission for an application program retrieved by a web browser within a client's workstation in a network operating environment, comprising the steps of:creating a non-standard command filetype extensio

[ What we claim is:] [1.] A method, implemented in a computer system, for determining execution permission for an application program retrieved by a web browser within a client's workstation in a network operating environment, comprising the steps of:creating a non-standard command filetype extension for all command files in said client's workstation in said network operating environment containing said application program;creating a unique filetype extension in said client's workstation having protection and permission information for said application program, said unique file type extension different from said non-standard command filetype;receiving at said client's workstation in said network operating environment said application program retrieved by said web browser;testing the content and source of said application program received at said client's workstation for said unique filetype extension; andexecuting said application program at said client's workstation by said web browser based on said protection and permission information.