Strategies for controlling use of a resource that is shared between trusted and untrusted environments

摘要

A strategy is described for controlling access to a resource which is shared between a trusted environment and an untrusted environment. The resource can represent a clipboard module. The trusted environment can include trusted client functionality, while the untrusted environment can include potentially untrusted network-accessible entities (e.g., websites) which seek to access the clipboard module. The strategy provides a security presentation which notifies a user when a network-accessible entity is attempting to access the clipboard module, identifying the entity which is making the attempt, together with the nature of the information being read or added to the clipboard module. The security presentation invites the user to approve or deny the particular attempt (or all such attempts from the network-accessible entity), and/or clear the clipboard module. The security presentation does not block the user's interaction with other parts of a user interface presentation.

主权项

1. A method implemented by a client device for controlling access to a resource maintained in a data store of the client device that is accessible to network entities, comprising:
interacting with web content associated with a network entity via a web-enabled application of the client device; detecting at the client device an attempt by the web content to access the resource maintained in the data store of the client device, the data store associated with a security module that facilitates transfer of content between applications of the client device; determining an access setting associated with the network entity; and controlling access of the web content to the resource according to the access setting that is determined for the network entity.