Patent ID: 7624111

Claim:
A computer-implemented method of providing security in a help system which teaches users how to accomplish tasks, the method comprising: receiving a call at the help system implemented using a processor, from a calling application, to access active content; using the processor to determine, based on predetermined criteria, an execution mode, from at least two execution modes including a trust mode and a safe mode, in which the active content is accessed, wherein determining the execution mode in which the active content is accessed further comprises determining whether to access the active content in the trust mode or in the safe mode, the trust mode allowing execution of code in the active content, and the safe mode statically rendering content of the active content but limiting execution of code in the active content, wherein statically rendering content of the active content comprises prohibiting invocation of shell execute content, prohibiting access to online content, and rendering titles, state probes and behaviors in a secure execution environment (SEE)-constrained environment, and wherein determining the execution mode further comprises determining a trust status of the calling application, wherein the calling application has one of a trusted application status and an untrusted application status, and further comprising using the processor to determine if the active content is electronically signed, and if the active content is electronically signed, using the processor to determine whether the active content has a valid certificate, the active content being determined to be from an untrusted source if the active content does not have a valid certificate; using the processor to determine, when the call is received at the help system from the calling application, whether other active content is currently being accessed in the trust mode or the safe mode; and using the processor to access the active content called by the calling application in the determined execution mode if the other active content is currently being accessed in the trust mode, and automatically accessing the active content called by the calling application in the safe mode, regardless of whether the determined execution mode is the safe mode or the trust mode, if the other active content is currently being accessed in the safe mode, to prevent an elevation of privileges of untrusted content.