Patent ID: 7693838

Claim:
A computer-implemented method comprising: receiving, by a host computer, a request for data, wherein the data is subject to data digital rights management (DRM); determining, in response to receiving the request, a data security policy for the requested data, including determining an access level to the requested data for the requester, wherein the data security policy is based at least in part on a type of the data, wherein the type of the data is based at least in part of one or more of a file type, a data size, and a frequency of use of the data; determining whether to grant access to the requested data based at least in part on a credential of the requester; in response to granting access to the requested data, providing creating a secure virtual partition in which to execute a software application to enable the requester to access the data, wherein the secure virtual partition is independent of any other operating system running on the host computer and isolated from any other partition on the host computer; performing an integrity check on a version of the software application; loading the integrity-verified version of the application into the secure virtual partition; and providing access to the requested data via the application according to the determined access level of the requester.