Browser with dual scripting engine for privacy protection

摘要

A data processing system has a browser with scripting engine means for executing a script. The scripting engine means implements a public scripting engine and a private scripting engine. The browser is configured to have the script executed by the public scripting engine if the script does not require access to a pre-determined resource at the system. The browser is configured to have the script executed by the private scripting engine if the script requires access to the pre-determined resource. Only the private scripting engine has an interface for enabling the script to access the predetermined resource. The scripting engine means is configured to prevent the private scripting engine from communicating data to the public scripting engine or to a non-approved server external to the data processing system.

主权项

1. A data processing system comprising:
a private resource; a connection to a public network; a hardware processor configured to process a public script instance and a distinct private script instance of a scripting engine while providing access to the private resource; and a memory configured to provide a browser environment, the browser environment configured to enable execution of: (i) the public script instance of the scripting engine, including allowing access to the public network when the public script instance of the scripting engine does not require access to the private resource; and (ii) the private script instance of the scripting engine as a plug-in to the browser, the private script instance of the scripting engine requiring access to the private resource including allowing access to the private resource when the access to the public network is denied; wherein the browser is configured with a data communication plug-in interface to allow communication from the public script instance of the scripting engine to the private script instance of the scripting engine, and to prevent communication from the private script instance of the scripting engine to the public script instance of the scripting engine unless there is a prior approval; and wherein only the private script instance of the scripting engine comprises a scripting API configured to enable access to the private resource.