Centralized enforcement of name-based computer system security rules

US7930760B2 · kind B2 · utility

Assignee

• Microsoft Corporation · US

Inventors

• Neil L. Coles · Redmond, US
• Yadhu Gopalan · Issaquah, US
• Christopher Ross Jordan · Redmond, US
• Matthew G. Lyons · Palatine, US
• Andrew Rogers · Bellevue, US
• Upender Sandadi · Issaquah, US
• Scott R. Shell · Redmond, US
• Zoheb Vacheri · Sunnyvale, US
• Angelo Renato Vals · Redmond, US
• Sharath Viswanathan · Seattle, US
• Loren M. Kohnfelder · Bellevue, US

Key dates

• Filing date: Jun 27, 2008
• Grant date: Apr 19, 2011
• Expiry date: Sep 24, 2029

Classification

• Technology area (CPC G): Physics
• CPC primary: G06F2221/2141
• WIPO field: Computer technology
• WIPO sector: Electrical engineering

Abstract

This disclosure describes techniques of using a centralized rule database to control the abilities of software processes to perform actions with regard to resources provided by a computer. As described herein, each software process executing in a computer executes within a chamber and each resource provided by the computer is associated with a canonical name that uniquely identifies the resource. Furthermore, the computer stores a set of security rules in a centralized rule database. In addition, this disclosure describes techniques of enforcing the rules stored in the centralized rule database.