Patent ID: 9715646
Date: 2017-07-25
CPC Classifications: G06F,G06K

Claim:
1. A method for isolating untrusted content on a computer device, the method comprising: intercepting a task from a primary user account prior to execution of the task by the computer device, wherein the primary user account comprises a first set of folders, the first set of folders comprising a first folder for containing files which are accessible under the primary user account and wherein the task relates to an untrusted content; providing a task isolation environment for executing the task, wherein providing the task isolation environment comprises provisioning the task isolation environment by programmatically creating a secondary user account on the computer device, wherein the secondary user account comprises a second set of folders, the second set of folders comprising a second folder for containing files which are accessible under the secondary user account; executing the task in the task isolation environment in relation to the untrusted content; intercepting a file access request originating from the task isolation environment which requests to create a subject file in the second folder in the secondary user account; redirecting the file access request to be performed instead by creating a target file in the first folder of the primary user account according to a mapping which relates the second folder of the secondary user account to the first folder of the primary user account; and after executing the task in the task isolation environment in relation to the untrusted content, deleting the secondary user account including deleting the second folder, while persisting the target file in the first folder of the primary user account.