ISOLATED EXECUTION LOCATION

摘要

The present invention provides an end user computer system programmed to operate in response to an imported data stream containing or having associated therewith one or more mobile program components from an external source, characterised in that: a) the incoming data stream is screened to identify mobile program components within or associated with that data stream; b) a selected some or all of the mobile program components are passed to one or more program execution locations selectively isolated from or within the end user system prior to being executed to operate in a desired manner; c) the execution location is one in which one or more of the selected program components are retained and which has one or more interfaces with the external source of the data stream and one or more interfaces with the end user system whereby program component(s) within the execution location can be executed within the execution location to interact with the external source of data and/or the data and/or a program held by the end user system; and d) the operation of the interface(s) between the execution location and the end user system are programmed so that only data which has been interacted on by the program component(s) within the execution location in a specified and controlled manner and/or program components which operate in a specified manner can be passed to and from the end user system.