Computer and method for safe usage of documents, email attachments and other content that may contain virus, spy-ward, or malicious code

Abstract

System, method, computer, and computer program and computer program product for safe usage of potentially malicious code and documents or other content to may contain malicious code. System and method for a virus and hacker-resistant computer. Method and system for supporting a computer systems self repair.

1 .- 31 . (canceled) 
     
     
         32 . A computer or information appliance comprising:
 a processing logic for executing a control environment process;   a control environment process for comparing at least a portion of an input data item with at least a portion of a stored template and determining a decision as to whether the compared portion of the input data item and the stored template match within matching criteria defined by a matching policy;   access control logic for denying access without authorization to first data item or document that contain executable code that attempt to link to second data item or document; and   authorization logic for authorizing access via the link before allowing the first data item or document to link to the second data item or document.   
     
     
         33 . The computer or information appliance as in  claim 32 , further comprising:
 the stored template, wherein the stored template is stored in a data structure defined in a memory of the computer or information appliance.   
     
     
         34 . The computer or information appliance as in  claim 32 , further comprising:
 the input port supporting at least an input of the data item from a source external to the computer or information appliance.   
     
     
         35 . A computer implemented method for execution in a processing logic of a computer or information appliance, the method comprising:
 establishing and executing a control environment process in a processing logic of the computer or information appliance;   the executing or the control environment process including:
 (i) executing a comparison operation for comparing at least a portion of an input data item with at least a portion of a stored template, and 
 (ii) executing a decision process for determining a decision as to whether the compared portion of the input data item and the stored template match within matching criteria defined by a matching policy; 
   denying access without authorization to first data item or document that contain executable code that attempt to link to second data item or document; and   authorizing access via the link before allowing the first data item or document to link to the second data item or document.   
     
     
         36 . The method as in  claim 35 , further comprising:
 Generating and storing the stored template in a data structure defined in a memory of the computer or information appliance.   
     
     
         37 . The method as in  claim 35 , further comprising:
 receiving at least an input of the data item from a source external to the computer or information appliance through an input port.   
     
     
         38 . A computer program product stored on a non-transitory tangible computer readable media and executable in a processor of the computer for controlling operation of a computer, the computer program product including a program module that includes executable computer program code instructions for:
 establishing and executing a control environment process in a processing logic of the computer or information appliance;   the executing or the control environment process including:
 (i) executing a comparison operation for comparing at least a portion of an input data item with at least a portion of a stored template, and 
 (ii) executing a decision process for determining a decision as to whether the compared portion of the input data item and the stored template match within matching criteria defined by a matching policy; 
   denying access without authorization to first data item or document that contain executable code that attempt to link to second data item or document; and   authorizing access via the link before allowing the first data item or document to link to the second data item or document.   
     
     
         39 . A computer implemented method of using a master template to protect a data storage from malicious executable computer code in a computer system, the method comprising:
 generating a first template having protection features and storing the generated first template in a protected isolated storage in the computer system;   operating at least one processing environment to monitor execution of computer code in the computer system that attempts to link from one stored item to a different stored item;   denying access without authorization from the first data item that contain executable code that attempts to link to a second data item; and   selectively authorizing access via the link only under predetermined conditions.   
     
     
         40 . The computer implemented method in  claim 39 , wherein:
 the operating at least one processing environment further comprises:   (i) executing a comparison operation for comparing at least a portion of an input data item with at least a portion of a stored template, and   (ii) executing a decision process for determining a decision as to whether the compared portion of the input data item and the stored template match within matching criteria defined by a matching policy.   
     
     
         41 . The computer implemented method in  claim 40 , further comprising making and storing the template. 
     
     
         42 . The computer implemented method in  claim 41 , wherein the stored the template comprising a stored master template.