Operating system resource protection

• US 20050091658A1
• Filed: 06/15/2004
• Published: 04/28/2005
• Est. Priority Date: 10/24/2003
• Status: Active Application

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Aaron, Freddie Lee, Fernandes, Genevieve, Li, Eric, Rector, John Austin, Praitis, Edward J., Noonan, Timothy D., Sambotin, Dragos C., Kavalam, Jude Jacob, Probert, David B., Lew, Jonathan C., FitzSimons, RoseMarie, Tsuryk, Valeriy
• Application Number:
  US10/868,182
• Publication Number:
  US 20050091658A1
• Time in Patent Office: Days
• US Class Current: 718/104
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 21/54 by adding security routines or objects to programs
• CPC Class Codes: G06F 21/568 eliminating virus, restoring damaged files
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices

Abstract

Granting an application program access to a resource as a function of a privilege associated with the application program. An embodiment of the invention employs a persistent, individual identity associated with the components of an application program or a group of application programs to allow an operating system to identify and differentiate between different application programs or groups of application programs installed on a computing system. The identity associated with each component of an application program enables the identification and removal or uninstallation of the application program. The identity also enables isolation of resources of the application program and protection of operating system resources.

Claims

1. A method of granting an application program access to a resource on a computing system, said method comprising:

receiving a request from an application program for access to a resource identified in the request;

determining an application identifier for the application program;

identifying a privilege from a manifest as a function of the determined application identifier and the identified resource, said manifest indicating the privilege that the application program has for accessing the identified resource; and

granting the application program access to the identified resource according to the identified privilege.

2. The method of claim 1, wherein identifying the privilege from the manifest comprises identifying the privilege from the manifest, said manifest being associated with the application program.

3. The method of claim 1, wherein identifying the privilege from the manifest comprises identifying the privilege from the manifest, said manifest being associated with an operating system executing on the computing system.

4. The method of claim 1, wherein determining the application identifier for the application program comprises determining the application identifier associated with each of a plurality of files and system settings, said plurality of files and system settings representing the application program.

5. The method of claim 1, wherein granting the application program access to the identified resource comprises granting the application program read-only access to the identified resource.

6. The method of claim 1, wherein granting the application program access to the identified resource comprises denying the application program access to the identified resource.

7. The method of claim 1, wherein granting the application program access to the identified resource comprises generating a copy of the resource for use by the application program.

8. The method of claim 7, wherein the application program is to be installed on the computing system, and further comprising installing the application program on the computing system using the generated copy of the resource.

9. The method of claim 1, wherein the application program is to be installed on the computing system, and further comprising installing the application program on the computing system including applying a system setting to the computing system.

10. The method of claim 9, wherein the computing system maintains a record of the applied system setting.

11. The method of claim 1, wherein determining the application identifier for the application program comprises determining the application identifier for a group of application programs.

12. The method of claim 1, wherein receiving the request from the application program for access to the resource identified in the request comprises receiving the request from the application program for access to one or more of the following:

a file, a directory, a named object, and a system setting.

13. The method of claim 1, wherein an operating system associated with the computing system performs said receiving, said determining, said identifying, and said granting.

14. The method of claim 1, further comprising receiving the manifest from an installation medium associated with the application program, wherein the manifest represents a list of files and resource changes associated with the application program.

15. The method of claim 1, further comprising receiving the manifest from an installation medium associated with the application program, wherein the manifest represents a list of files and resource changes associated with an operating system executing on the computing system.

16. The method of claim 1, further comprising generating the manifest based on one or more actions of the application program after installation of the application program.

17. The method of claim 1, wherein one or more computer-readable media have computer-executable instructions for performing the method of claim 1.

18. One or more computer-readable media having computer-executable components for granting an application program access to a resource, said components comprising:

an interface module to receive a request from an application program for access to a resource identified in the request;

an identity module to determine an application identifier for the application program to distinguish the application program and components thereof from other application programs;

a filter module to identify a privilege from a manifest as a function of the application identifier determined by the identity module and the identified resource, said manifest indicating the privilege that the application program has for accessing the identified resource; and

an access control module to grant the application program access to the identified resource according to the privilege identified by the filter module.

19. The computer-readable media of claim 18, wherein the identity module determines the application identifier for a group of application programs.

20. The computer-readable media of claim 18, wherein the interface module receives the request from the application program for access to one or more of the following:

a file, a directory, a named object, and a system setting.

21. The computer-readable media of claim 18, further comprising a configuration module to receive the manifest from an installation medium associated with the application program.

22. The computer-readable media of claim 18, wherein the identity module determines the application identifier associated with each of a plurality of files and system settings, said plurality of files and system settings representing the application program.

23. A computer-readable medium having stored thereon a data structure representing a manifest specifying access rights of an application program to access a plurality of resources, said data structure comprising:

a first field storing a value representing an identity corresponding to the application program;

a second field storing a list of resources associated with the application program; and

a third field storing a privilege associated with the identity from the first field and with the list of resources stored in the second field, said privilege defining an access right of the application program to access each resource in the list of resources.

24. The computer-readable medium of claim 23, wherein the first field stores the value based on one or more of the following:

a version, a central processing unit, and a public key.

25. The computer-readable medium of claim 23, wherein the second field stores the list of resources comprising one or more of the following:

a file, a directory, a named object, and a system setting.

26. The computer-readable medium of claim 23, wherein the third field stores the privilege representing a declaration of intent.

27. A system for granting an application access to a system resource, said system comprising:

a memory area to store a manifest, said manifest mapping an application identifier and a resource to a privilege, said application identifier being associated with an application program;

a processor configured to execute computer-executable instructions to;

determine, responsive to a request from the application program for the resource, the privilege from the manifest stored in the memory area as a function of the application identifier and the resource; and

grant the application program access to the resource according to the determined privilege.

28. The system of claim 27, wherein the resource comprises one or more of the following:

a file, a directory, a network socket, a name in the system namespace, a named object, and a system setting.

29. The system of claim 28, wherein the named object comprises an object identified by one or more of the following:

alphabetic data, numeric data, alphanumeric data, and non-human readable data.

30. The system of claim 27, wherein the application program comprises a plurality of files and system settings, and wherein the application identifier is associated with each of the plurality of files and system settings.

31. The system of claim 27, wherein the memory area further stores a copy of the resource, wherein the privilege specifies write access, and wherein the processor is configured to execute computer-executable instructions to grant the application program write access to the copy of the resource.

32. A method of uninstalling a particular application program and associated system settings and objects from a computing system, said particular application program having at least one file associated therewith, said particular application program being one of a plurality of application programs installed on the computing system, said method comprising:

receiving a request to uninstall the particular application program;

determining an identifier associated with the particular application program;

identifying, via the determined identifier, a file associated only with the particular application program of the plurality of application programs, said identified file having the determined identifier associated therewith; and

deleting the identified file.

33. The method of claim 32, further comprising:

identifying, via the determined identifier, one or more resource changes applied in response to installing the particular application program; and

reverting the identified resource changes.

34. The method of claim 33, further comprising maintaining a log of the applied resource changes.

35. The method of claim 34, wherein identifying the one or more resource changes comprises identifying a file type association, and wherein reverting the identified resource changes comprises reverting the file type association to a previous association maintained in the log.

36. The method of claim 32, wherein identifying the file associated only with the particular application program of the plurality of application programs comprises identifying one or more objects associated only with the particular application program of the plurality of application programs.