Patent ID: 7653900
Filing Date: 2010-01-26
Classification: G06F

Abstract:
1. A system for controlling an application process comprising: first computer means associated with a secured computing environment, the first computer means for recognizing a request for access by a client computer to resources of the secured computing environment, the client computer being remote from the secured computing environment, for pushing an access policy to the client computer, the access policy identifying resources in the secured computing environment authorized for access by the client computer, and for providing to the client computer an injector to be stored on the client computer, the injector operable to inject redirect code into a memory space used by an application process executing on the client computer, the application process for communicating with the resources of the secured computing environment for which access is requested; and a library of redirect functions operable to be referenced by the redirect code during execution of the application process, wherein the redirect code is operable to (i) intercept at least one function call made by the application process to access secured data associated with the resources of the secured computing environment for which access is requested, and (ii) execute at least one of the redirect functions in place of the at least one intercepted function call so as to enable the application process, executing at the first computing device, to access the secured data, wherein the first computer means comprises a firewall securing all access to the resources in the secured computing environment.