Patent ID: 9298930
Filing Date: 2016-03-29
CPC Classification: G06F

Claim Text:
1. A method implemented by a single computing device having a first perimeter and a second perimeter with access restrictions on resources between the first perimeter and the second perimeter, the first perimeter and the second perimeter each defining a logical separation within a memory of the single computing device, the method comprising: receiving an input requesting a transfer of data from the first perimeter to the second perimeter; identifying a first cross-perimeter policy associated with the first perimeter and a second cross-perimeter policy associated with the second perimeter, the first and second cross-perimeter policies defining, for each of the first and second perimeters respectively, one or more criteria for at least one of: permitting the transfer of data or requiring generation of an audit trail; combining the first cross-perimeter policy and the second cross-perimeter policy to determine at least one of: whether the transfer of data is permitted or whether generation of the audit trail is required; and in accordance with the determination resulting from the combining: