Ismael J Lopez

US Patent:

20190005227, Jan 3, 2019

Filed:

Jun 29, 2017

Appl. No.:

15/637878

Inventors:

- New York NY, US
Mark Fenkner - Marlton NJ, US
Charles King - Plano TX, US
Ismael Lopez - Bronx NY, US
Peter Martz - Blenheim NJ, US

Assignee:

L3 Technologies, Inc. - New York NY

International Classification:

G06F 21/53
H04L 9/32
H04L 29/06
H04L 29/12

Abstract:

Methods and systems are disclosed for sandbox based internet isolation system in a trusted network. A networked computer system may include a trusted local area network (LAN) and at least one host computer system connected to the trusted LAN. The host computer system may include a host-based firewall, an operating system, a first memory space, and a second memory space. The host-based firewall may be configured to prevent unauthorized communication between the host computer system and one or more other devices on the trusted LAN. The second memory space may be configured to enable storage and/or operation of one or more applications and/or processes associated with a sandboxed computing environment. The host computer system may include a sandbox firewall that enforces a separation of the first and second memory spaces.

US Patent:

20190007257, Jan 3, 2019

Filed:

Jun 29, 2017

Appl. No.:

15/637951

Inventors:

- New York NY, US
Mark Fenkner - Marlton NJ, US
Charles King - Plano TX, US
Ismael Lopez - Bronx NY, US
Peter Martz - Blenheim NJ, US

Assignee:

L3 Technologies, Inc. - New York NY

International Classification:

H04L 29/06
G06F 21/53
G06F 21/56

Abstract:

Methods and systems are disclosed for a sandbox based internet isolation in an untrusted network. A host computer system may include a host-based firewall, an operating system, a first memory space, and a second memory space. The host-based firewall may be configured to prevent unauthorized communication between the trusted host computer system and one or more other devices on an untrusted LAN and/or the Internet. The second memory space may be configured to enable storage and/or operation of one or more applications and/or processes associated with a sandboxed computing environment. The host computer system may include a sandbox firewall that enforces separation of the first and second memory spaces.