Patent ID: 9659169
Date: 2017-05-23
CPC Classifications: G06F

Claim:
1. A method for operating a computer data processing device having an operating system in two or more data security domains, comprising: providing in data memory associated with said computer data processing device at least one external policy defining at least one computer data processing device application and data domain; associating said at least one computer data processing device application and data with said at least one domain; providing at least one persistent control mechanism over said computer data processing device application and data associated with said at least one application, said persistent control mechanism being subject to policies defined for said at least one domain, said policies being application-specific, user-specific, or data-specific, and said persistent control mechanism being separate from said operating system and said persistent control mechanism being configured to intercept requests from said computer data processing device application to said operating system; and providing at least one mechanism for fine-grained policy-based control over operations by and between, said computer data processing device application and data.