Patent ID: 11880422
Assignee: CLOUDFLARE, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 0:
1. A non-transitory computer-readable medium that stores instructions that, when executed by one or more processors, cause the one or more processors to perform actions, the actions comprising:
instantiating an instance of a remote application in an executing computing device;
intercepting, at the remote application instance in the executing computing device, a first set of one or more draw commands associated with output of the remote application instance;
providing, by the executing computing device, the first set of one or more draw commands to a rendering computing device for rendering a display of a first web page, wherein the rendering computing device is remotely located, separate, and distinct from the executing computing device;
receiving, by the executing computing device, user inputs representing an action of a user of an instance of a local application on the rendering computing device with the first web page, the local application instance and the remote application instance cooperatively providing an application isolation session isolating the local application instance from malicious changes to the remote application;
determining that the user action is directed to a target absent from a whitelist;
determining that the user inputs representing the user action includes a trigger event of one or more trigger events determined based on a role associated with the user responsive to determining that the user action is directed to that target absent from the whitelist, the trigger event including a predetermined number of keystrokes satisfying a character variety requirement;
responsive to determining that the user inputs representing the user action includes the trigger event, evaluating one or more characteristics of one or more fields in the rendering output of the remote application instance to detect one or more candidate sensitive information fields in the rendering output of the remote application instance on the executing computing device;
evaluating one or more values of the one or more detected candidate sensitive information fields to determine that the one or more values include candidate sensitive information;
generating one or more secure versions of the determined candidate sensitive information based on the evaluation;
comparing the one or more generated secure versions of the determined candidate sensitive information to one or more stored values to verify that the determined candidate sensitive information includes actual sensitive information; and
responsive to the comparison, preventing the verified actual sensitive information from being provided from the local application instance or the remote application instance to another application or computing device.