Patent ID: 7469417

Claim:
A system for authenticated dynamic extension of security domain boundaries, comprising: a first computer executing dynamic high security domain extension instructions for dynamically forming an extended high security domain through a protected communication path from a the first computer associated with a high security domain into a second computer associated with low security domain; the second computer executing establishing instructions within said extended high security domain within said second computer for establishing the protected communication path between said high security domain and said extended high security domain within low security domain, said protected communication path forming an isolation barrier separating said extended high security domain from said low security domain; the first computer executing instructions for receiving an authenticated access request from a user within said low security domain for temporary authentication with said high security domain; the first computer executing instructions for providing temporarily authenticated access to said high security domain in response to said high security domain receiving said authenticated access request; and the second computer executing authentication instructions associated with said low security domain and said high security domain for temporarily authenticating at least one object associated with said low security domain.