First computer process and second computer process proxy-executing code on behalf thereof

• US 20050081050A1
• Filed: 10/08/2003
• Published: 04/14/2005
• Est. Priority Date: 10/08/2003
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Hatlelid, Kristjan E., Gunyakti, Caglar, Lelikov, Andrey
• Granted Patent: US 7,788,496 B2
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: G06F 21/125 by manipulating the program code, e.g. source code, compiled code, interpreted code, machine code

Abstract

A first process operating on a computer comprises code to be executed in connection therewith, where the code includes at least one triggering device. A digital license corresponds to the first process and sets forth terms and conditions for operating the first process. A second process operating on the computer proxy-executes code corresponding to each triggering device of the first process on behalf of such first process. The second process includes a license evaluator for evaluating the license to determine whether the first process is to be operated in accordance with the terms and conditions set forth in such license, and the second process chooses whether to in fact proxy-execute based at least in part on determination of the license evaluator. Thus, the first process is dependent upon the second process for operation thereof.

Claims

1. A computer having thereon:

a first process operating on the computer comprising code to be executed in connection therewith, the code including at least one triggering device;

a digital license corresponding to the first process, the license setting forth terms and conditions for operating the first process; and

a second process operating on the computer for proxy-executing code corresponding to each triggering device of the first process on behalf of such first process, the second process including a license evaluator for evaluating the license to determine whether the first process is to be operated in accordance with the terms and conditions set forth in such license, the second process choosing whether to in fact proxy-execute the code corresponding to each triggering device of the first process on behalf of such first process based at least in part on whether the license evaluator has determined that the first process is to be operated in accordance with the terms and conditions of the license, whereby the first process is dependent upon the second process for operation thereof.

2. The computer of claim 1 wherein the first process is an application and the second process a rights client.

3. The computer of claim 1 further comprising a table available to the second process, the table including the code corresponding to each triggering device of the first process and an address of the triggering device in the first process.

4. The computer of claim 3 wherein the table is set forth in the license.

5. The computer of claim 4 wherein the code corresponding to each triggering device of the first process is encrypted within the table and is decryptable according to a decryption key obtainable by the second process.

6. The computer of claim 5 wherein the license includes the decryption key encrypted in a manner decryptable by the second process.

7. A method for developing a first process that is to be operated on a computer such that a second process operating on the computer may proxy-execute code on behalf of such first process, the method comprising:

developing source code for the first process in an appropriate programming language;

identifying within such source code each of one or more code sections that is to be proxy-executed by the second process;

compiling the source code into machine code such that an identification of each identified code section is maintained;

post-compiling the machine code with each identified code section therein into final code representative of the first process based on the identification of each identified code section by for each identified code section converting same into a form accessible only by the second process and not by the first process.

8. The method of claim 7 wherein post-compiling the machine code comprises, for each identified code section in the machine code:

removing the identified code section from the machine code;

replacing the removed code section with a triggering device;

noting an address of the triggering device within the final code representative of the first process; and

storing the removed code section and the noted address in a table; and

the method further comprising outputting the final code representative of the first process and the table.

9. The method of claim 8 comprising storing the removed code section in the table in an encrypted form decryptable according to a decryption key obtainable by the second process.

10. The method of claim 8 comprising storing the table in a license corresponding to the first process and available to the second process.

11. The method of claim 8 comprising replacing the removed code section with a predetermined exception predefined to be noted by the second process.

12. The method of claim 7 comprising identifying each code section to be proxy-executed by way of at least one of a mark, tag, and command.

13. The method of claim 7 wherein the second process includes a license evaluator for evaluating a digital license corresponding to the first process, the license setting forth terms and conditions for operating the first process, the license evaluator for determining whether the first process is to be operated in accordance with the terms and conditions set forth in such license, the second process choosing whether to in fact proxy-execute the code corresponding to each triggering device of the first process on behalf of such first process based at least in part on whether the license evaluator has determined that the first process is to be operated in accordance with the terms and conditions of the license, the method comprising identifying each code section to be proxy-executed in a manner such that proxy-execution occurs from time to time so as to ensure that the second process is present and is allowing the first process to operate based on the license.

14. The method of claim 7 wherein the second process includes a license evaluator for evaluating a digital license corresponding to the first process, the license setting forth terms and conditions for operating the first process, the license evaluator for determining whether the first process is to be operated in accordance with the terms and conditions set forth in such license, the second process choosing whether to in fact proxy-execute the code corresponding to each triggering device of the first process on behalf of such first process based at least in part on whether the license evaluator has determined that the first process is to be operated in accordance with the terms and conditions of the license, the method comprising identifying each code section to be proxy-executed in a targeted manner such that proxy-execution occurs at specific times and/or with regard to specific sections of code.

15. The method of claim 14 comprising Identifying each code section includes specifying a particular license term or condition, whereby the second process proxy-executes such identified code section only if the specified license term or condition in the license is met.

16. The method of claim 7 further comprising ensuring with regard to each identified code section that the identified code section does not impinge on pre-defined secure aspects of the computer.

17. A method in combination with a computer having a first process operating thereon and comprising code to be executed in connection therewith, the code including at least one triggering device, and a table including a code section corresponding to each triggering device of the first process and an address of the triggering device in the first process, the method for a second process operating on the computer to proxy-execute code corresponding to each triggering device of the first process on behalf of such first process, the method comprising:

the second process monitoring for when the first process executes a triggering device thereof;

the first process executing a triggering device and halting;

the second process noting the triggering device being executed by the first process and responding thereto by;

determining an address of the triggering device within the first process;

locating in the table the code section corresponding to the triggering device based on the determined address;

proxy-executing the located code section on behalf of the first process; and

signaling to the first process that the triggering device has been dealt with; and

the first process then resuming, whereby the first process is dependent upon the second process for operation thereof.

18. The method of claim 17 wherein the computer further includes a digital license corresponding to the first process, the license setting forth terms and conditions for operating the first process, the method further comprising the second process evaluating the license and verifying that the first process is operating in accordance with the terms and conditions set forth in such license prior to proxy-executing the located code section on behalf of the first process.

19. The method of claim 17 wherein the located code section is encrypted, the method further comprising the second process decrypting the located code section before proxy-executing same.

20. The method of claim 17 wherein each triggering device is a particular exception and comprising the second process monitoring for when the first process executes the particular exception.

21. The method of claim 20 further comprising the second process attaching to the first process so as to monitor the first process for the particular exception directly.

22. The method of claim 17 wherein each triggering device is one of a plurality of types of exceptions and comprising the second process monitoring for when the first process executes any of the types of exceptions, the second process responding to each type of exception in a differing manner.

23. The method of claim 17 wherein the computer further includes a digital license corresponding to the first process, the license setting forth terms and conditions for operating the first process, and wherein the second process proxy-executing the located code section on behalf of the first process comprises the second process securely retrieving a term or condition from the license and employing same on behalf of the first process.