PATENT CLAIM ANALYSIS

Application Number: 16044986
Application Type: Utility
Filing Date: 2018-07
Publication Date: 2018-11
Patent Classification: ["726", "023000"]

Abstract:
Described systems and methods enable enforcing application control remotely and automatically, on a relatively large number of client systems (e.g., a corporate network, a virtual desktop infrastructure system, etc.). An application control engine executes outside a virtual machine exposed on a client system, the application control engine configured to enforce application control within the virtual machine according to a set of control policies. When a policy indicates that a specific process is not allowable on the respective client system, the app control engine may prevent execution of the respective process. To assist in data gathering and/or other activities associated with application control, some embodiments temporarily drop a control agent into the controlled virtual machine.

Claim (Index 1):
A server computer system configured to perform application control transactions with a plurality of client systems, the server computer system comprising at least one server hardware processor configured to:\n receive an identity indicator indicative of an identity of a target process executing on a client system of the plurality of client systems, the identity indicator determined by the client system; and in response, transmit an application control policy to the client system, the application control policy mapping computer programs to users of the client system, wherein the client system is configured to execute a set of guest virtual machines (VM) and to further execute an application control engine, the application control engine executing outside the set of guest VMs, wherein determining the identity indicator comprises:\n employing the application control engine to detect an event indicative of a launch of the target process within a guest VM of the set of guest VMs, wherein the event comprises an item selected from a group consisting of setting up a virtual memory space for the target process and writing to a data structure used by a client hardware processor of the client system to perform memory address translations for the target process, and \n employing the application control engine to determine the identity indicator according to the event, \n and wherein the application control engine is further configured to:\n in response to detecting the event, determine according to the application control policy whether the target process is allowed to execute on the client system, and \n in response to determining whether the target process is allowed to execute, when the target process is not allowed to execute, prevent an execution of the target process.

Metadata:
- Claim Count in Document: 41.0
- Percentile: 95.0
- Lexical Diversity: 1.71622
- Patent Class: 726.0
- Transitional Phrase Type: open
- Component Type: 1
- Foreign Priority: False
- Related Applications: ['15086490', '15045979', '15383082', '15971425', '15471981']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.2837685810086549
- 35 USC 102 Novelty (BERT): 0.5785252421983541
- Combined Prediction Score: 0.3132442471276248
- Mean Citation Score: 363.08979
- Max Citation Score: 488.06003
- Similarity Product: 400.0304300066906

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 1
- Claim Label 112: 1
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test