SECURE REMOTE WORKER DEVICE AND MANAGEMENT SYSTEM
A secure remote worker (SRW) application that executes in a hypervisor of a user's personal computing device to analyze data and determine if the data is destined for a corporate remote access system or other location. The SRW may perform a security analysis of the data to determine if the data itself or a location associated with the data is known malware. The SRW may be remotely managed to enable and configured.
1 . A method of securing and routing data on a computing device, comprising:
running a secure remote worker (SRW) application in a guest within a hypervisor executing on the computing device;
performing, by the SRW, a deep packet inspection of data communicated by the computing device over a communications network;
determining if the data is associated with an untrusted site, and if so, routing the data using the SRW directly to a data center, otherwise routing the data to a destination associated with the data; and
encrypting, by the SRW, unencrypted data packets prior to transmission over the communications network.
2 . The method of claim 1 , further comprising performing a security scan of the data if the destination is untrusted.
3 . The method of claim 1 , further comprising performing an analysis of network data traffic to determine a Work from Home worker's daily activities and workload.
4 . The method of claim 3 , wherein phone and smartphone generated voice and data traffic are also routed through the computing device to enable a more accurate analysis of the daily activities and workload.
5 . The method of claim 1 , wherein corporate traffic is routed over a guest network and home traffic is routed over a main network to achieve separation of network traffic.
6 . The method of claim 1 , further comprising:
providing a second network connection for the computing device in addition to a first network connection to a data network, wherein the second network connection serves as a back-up to the first network connection.
7 . The method of claim 1 , further comprising:
providing a second network connection for the computing device in addition to a first network connection to a data network, wherein the second network connection augments the first network connection to increase available bandwidth.
8 . The method of claim 1 , wherein the hypervisor does not support video display.
9 . A computer system, comprising:
a memory comprising computer-executable instructions; and
a processor configured to execute the computer-executable instructions and cause the computer system to perform a method of providing data security and routing to a remote computing device, the computer system executing instructions to:
run a secure remote worker (SRW) application in a guest within a hypervisor executing on the computing device;
perform, by the SRW, a deep packet inspection of data communicated by the computing device over a communications network;
determine if the data is associated with an untrusted site, and if so, route the data using the SRW directly to a data center, otherwise routing the data to a destination associated with the data; and
encrypt, by the SRW, unencrypted data packets prior to transmission over the communications network.
10 . The computer system of claim 9 , further executing instructions to perform a security scan of the data if the destination is untrusted.
11 . The computer system of claim 9 , wherein the SRW performs an analysis of network data traffic to determine a Work from Home worker's daily activities and workload.
12 . The computer system of claim 11 , wherein phone and smartphone generated voice and data traffic are also routed through the computing device to enable a more accurate analysis of the daily activities and workload.
13 . The computer system of claim 9 , wherein corporate traffic is routed over a guest network and home traffic is routed over a main network to achieve separation of network traffic.
14 . The computer system of claim 9 , further comprising:
a second network connection for the computing device in addition to a first network connection to a data network, wherein the second network connection serves as a back-up to the first network connection.
15 . The computer system of claim 9 , further comprising:
a second network connection for the computing device in addition to a first network connection to a data network, wherein the second network connection augments the first network connection to increase available bandwidth.
16 . The computer system of claim 9 , wherein the hypervisor does not support video display.
17 . A non-transitory computer readable medium comprising instructions that, when executed by a processor of a processing system, cause the processing system to perform a method of providing data security and routing to a remote computing device, comprising instructions to:
run a secure remote worker (SRW) application in a guest within a hypervisor executing on the computing device;
perform, by the SRW, a deep packet inspection of data communicated by the computing device over a communications network;
determine if the data is associated with an untrusted site, and if so, route the data using the SRW directly to a data center, otherwise routing the data to a destination associated with the data; and
encrypt, by the SRW, unencrypted data packets prior to transmission over the communications network.
18 . The non-transitory computer readable medium of claim 17 , further comprising instructions to perform a security scan of the data if the destination is untrusted.
19 . The non-transitory computer readable medium of claim 17 , further comprising instructions to perform an analysis of network data traffic to determine a Work from Home worker's daily activities and workload.
20 . The non-transitory computer readable medium of claim 17 , further comprising instructions to route corporate traffic over a guest network and home traffic over a main network to achieve separation of network traffic.