| CPC G06F 21/6218 (2013.01) | 17 Claims |

|
1. A method for enabling persistence in a volatile secure workspace, the method comprising:
obtaining, by a host agent executing on a user computing device, a managed application image that is associated with a volatile secure workspace, the managed application image including a managed application;
in response to the volatile secure workspace being deployed on the user computing device, mounting, by the host agent which executes on the user computing device outside of the volatile secure workspace, the managed application image to the volatile secure workspace to create an injected volume within the volatile secure workspace;
sharing, by the host agent, image details for the managed application image with a file system filter running in the volatile secure workspace;
using, by the file system filter, the image details to cause the managed application to be loaded in the volatile secure workspace from the managed application image;
receiving, by the file system filter, I/O requests associated with the managed application;
using, by the file system filter, the image details to redirect the I/O requests associated with the managed application to the managed application image to thereby create or update one or more artifacts on the managed application image that is stored outside the volatile secure workspace; and
persisting the managed application image with the one or more artifacts when the volatile secure workspace is stopped.
|