A host computer supports a virtual guest
system running thereon. The host
system has a firewall that prevents it from communicating directly with
the Internet, except with predetermined trusted sites. The virtual guest runs on a
hypervisor, and the virtual guest comprises primarily a browser program that is allowed to contact
the Internet freely via an
Internet access connection that is completely separate from the host computer connection, such as a dedicated
network termination point with its specific Internet
IP address, or by tunneling through the
host machine architecture to reach
the Internet without exposing the host
system. The virtual guest system is separated and completely isolated by an internal firewall from the host, and the guest cannot access any of the resources of the host computer, except that the guest can initiate
cut, copy and paste operations that reach the host, and the guest can also request print of documents. The host can transfer files to and from a virtual data
storage area accessible by the guest by manual operator action. No other transfer of data except these user initiated actions is permitted.