Abstract: A unification system for integrating multiple computing environments, which are available for simultaneous use by a single user, into a base environment includes a unification supervisor and a plurality of agents, where each agent is associated with a respective computing environment. The unification supervisor monitors information received from the agents regarding the multiple computing environments, and performs centralized direction of the computing environments in accordance with the received information. The centralized direction serves to incorporate the other computing environments into the base environment, and may be guided by policies designed to provide the user with a unified environment. The unification supervisor also issues instructions to the various agents. Each of the agents provides information regarding a respective computing environment to the unification supervisor, and may also manage the respective computing environment as directed by the unification supervisor.

Abstract: Apparatus for securing data, comprising: an isolated processing environment having a boundary across which data cannot cross and a channel for allowing data to cross the boundary. A filter restricts data passage across the channel. Protected data is initially located in a secure area and is only released to such a secure processing environment so that access for authorized users to the secure data is available, but subsequent release of the secure data by the authorized users to the outside world is controlled.

Abstract: A unification system for integrating multiple computing environments, which are available for simultaneous use by a single user, into a base environment includes a unification supervisor and a plurality of agents, where each agent is associated with a respective computing environment. The unification supervisor monitors information received from the agents regarding the multiple computing environments, and performs centralized direction of the computing environments in accordance with the received information. The centralized direction serves to incorporate the other computing environments into the base environment, and may be guided by policies designed to provide the user with a unified environment. The unification supervisor also issues instructions to the various agents. Each of the agents provides information regarding a respective computing environment to the unification supervisor, and may also manage the respective computing environment as directed by the unification supervisor.

Abstract: Apparatus for securing data, comprising: an isolated processing environment having a boundary across which data cannot cross and a channel for allowing data to cross the boundary. A filter restricts data passage across the channel. Protected data is initially located in a secure area and is only released to such a secure processing environment so that access for authorized users to the secure data is available, but subsequent release of the secure data by the authorized users to the outside world is controlled.