Methods and systems for accessing, by application programs, resources provided by an operating system

• US 20060265714A1
• Filed: 09/19/2005
• Published: 11/23/2006
• Est. Priority Date: 09/30/2004
• Status: Active Grant

• Current Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Original Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Inventors: Mazzaferri, Richard James, Bissett, Nicholas Alexander, Roychoudhry, Anil
• Granted Patent: US 8,302,101 B2
• Time in Patent Office: Days
• US Class Current: 718/104
• CPC Class Codes: G06F 16/10 File systems; File servers
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 2209/542 Intercept
• CPC Class Codes: G06F 8/61 Installation
• CPC Class Codes: G06F 9/45537 Provision of facilities of other operating environments, e.g. WINE I/O emulation G06F13/105
• CPC Class Codes: G06F 9/468 Specific access rights for resources, e.g. using capability register
• CPC Class Codes: G06F 9/4856 resumption being on a different machine, e.g. task migration, virtual machine migration G06F9/5088 takes precedence
• CPC Class Codes: G06F 9/5011 the resources being hardware resources other than CPUs, Servers and Terminals
• CPC Class Codes: G06F 9/52 Program synchronisation; Mutual exclusion, e.g. by means of semaphores
• CPC Class Codes: G06F 9/541 via adapters, e.g. between incompatible applications
• CPC Class Codes: G06F 9/545 where tasks reside in different layers, e.g. user- and kernel-space
• CPC Class Codes: Y10S 707/99931 Database or file accessing

Abstract

In a method for accessing, by application programs, resources provided by an operating system, a process receives a request for a resource and an identifier associated with the resource. It is determined that the requested resource resides in a location outside the application isolation environment. The request for the resource and the identifier associated with the resource is redirected to the determined location. The request for the resource is responded to using an instance of the resource residing in the determined location.

Claims

1. A method for accessing, by application programs, resources provided by an operating system, the method comprising the steps of:

(a) receiving, by a process executing inside an application isolation environment, a request for a resource and an identifier associated with the resource;

(b) determining that the requested resource resides in a location outside the application isolation environment;

(c) redirecting the request for the resource and the identifier associated with the resource to the determined location; and

(d) responding to the request for the resource using an instance of the resource residing in the determined location.

2. The method of claim 1, wherein step (b) further comprises determining, by a process executing outside the application isolation environment, that the requested resource resides outside the application isolation environment.

3. The method of claim 1, wherein step (b) further comprises determining, by a process executing inside the application isolation environment, that the requested resource resides outside the application isolation environment.

4. The method of claim 1, wherein step (c) further comprises redirecting, by a process executing outside the application isolation environment, the request for the resource and the identifier associated with the resource to the determined location.

5. The method of claim 1, wherein step (c) further comprises redirecting, by a process executing inside the application isolation environment, the request for the resource and the identifier associated with the resource to the determined location.

6. The method of claim 1, wherein step (d) further comprises responding, by a process executing outside the application isolation environment, to the request for the resource using an instance of the resource residing in the determined location.

7. The method of claim 1, wherein step (d) further comprises responding, by a process executing inside the application isolation environment, to the request for the resource using an instance of the resource residing in the determined location.

8. The method of claim 1, wherein step (a) comprises making, by the process executing inside the application isolation environment, a request for a resource, the request including an identifier associated with a resource.

9. The method of claim 1, wherein step (a) further comprises receiving a request for a resource and an identifier associated with the resource, the identifier comprising a class identifier identifying at least one COM server.

10. The method of claim 1, wherein step (d) further comprises communicating with the resource over an interface provided by a process.

11. A method for accessing, by application programs, resources provided by an operating system, the method comprising the steps of:

(a) receiving a request for a resource and an identifier associated with the resource;

(b) determining, by a process executing inside an application isolation environment, that the requested resource resides in a location outside the application isolation environment;

(c) redirecting the request for the resource and the identifier associated with the resource to the determined location; and

(d) responding to the request for the resource using an instance of the resource residing in the determined location.

12. The method of claim 11, wherein step (c) further comprises redirecting, by a process executing outside the application isolation environment, the request for the resource and the identifier associated with the resource to the determined location.

13. The method of claim 11, wherein step (c) further comprises redirecting, by a process executing inside the application isolation environment, the request for the resource and the identifier associated with the resource to the determined location.

14. The method of claim 11, wherein step (d) further comprises responding, by a process executing outside the application isolation environment, to the request for the resource using an instance of the resource residing in the determined location.

15. The method of claim 11, wherein step (d) further comprises responding, by a process executing inside the application isolation environment, to the request for the resource using an instance of the resource residing in the determined location.

16. The method of claim 11, wherein step (a) comprises making a request for a resource including an identifier associated with the resource.

17. The method of claim 11, wherein step (a) further comprises receiving a request for a resource and an identifier associated with the resource, the identifier comprising a class identifier identifying at least one COM server.

18. The method of claim 11, wherein step (d) further comprises communicating with the resource over an interface provided by a process.

19. A method for accessing, by application programs, resources provided by an operating system, the method comprising the steps of:

(a) receiving a request for a resource and an identifier associated with the resource;

(b) determining that the requested resource resides in a location outside an application isolation environment;

(c) redirecting, by a process executing inside the application isolation environment, the request for the resource and the identifier associated with the resource to the determined location; and

(d) responding to the request for the resource using an instance of the resource residing in the determined location.

20. The method of claim 19, wherein step (d) further comprises responding to the request for the resource, by a process executing outside the application isolation environment, using an instance of the resource residing in the determined location.

21. The method of claim 19, wherein step (d) further comprises responding to the request for the resource, by a process executing inside the application isolation environment, using an instance of the resource residing in the determined location.

22. The method of claim 19, wherein step (a) comprises making a request for a resource including an identifier associated with the resource.

23. The method of claim 19, wherein step (a) further comprises receiving a request for a resource and an identifier associated with the resource, the identifier comprising a class identifier identifying at least one COM server.

24. The method of claim 19, wherein step (d) further comprises communicating with the resource over an interface.

25. A method for accessing, by application programs, resources provided by an operating system, the method comprising the steps of:

(a) receiving a request for a resource and an identifier associated with the resource;

(b) determining that the requested resource resides in a location outside an application isolation environment;

(c) redirecting the request for the resource and the identifier associated with the resource to the determined location; and

(d) responding, by a process executing inside the application isolation environment, to the request for the resource using an instance of the resource residing in the determined location.

26. The method of claim 25, wherein step (a) comprises making a request for a resource including an identifier associated with the resource.

27. The method of claim 25, wherein step (a) further comprises receiving a request for a resource and an identifier associated with the resource, the identifier comprising a class identifier, said identifier identifying at least one COM server.

28. The method of claim 25, wherein step (d) further comprises communicating, by the process executing inside the application isolation environment with the resource over an interface.

29. A system for accessing, by application programs, resources provided by an operating system, the system comprising:

a resource;

a first process, executing inside an application isolation environment, receiving a request for the resource and an identifier associated with the resource;

a second process determining that the resource resides in a location outside the application isolation environment;

a third process redirecting the request for the resource and the identifier associated with the resource to the determined location; and

a fourth process responding to the request for the resource using an instance of the resource residing in the determined location.

30. The system of claim 29, wherein the second process executes inside the application isolation environment.

31. The system of claim 29, wherein the second process executes outside the application isolation environment.

32. The system of claim 29, wherein the third process executes inside the application isolation environment.

33. The system of claim 29, wherein the third process executes outside the application isolation environment.

34. The system of claim 29, wherein the fourth process executes inside the application isolation environment.

35. The system of claim 29, wherein the fourth process executes outside the application isolation environment.

36. The system of claim 29, wherein the first process and the second process comprise the same process.

37. The system of claim 29, wherein the first process and the third process comprise the same process.

38. The system of claim 29, wherein the first process and the fourth process comprise the same process.

39. The system of claim 29, wherein the first process and the second process and the third process comprise the same process.

40. The system of claim 29, wherein the first process and the second process and the fourth process comprise the same process.

41. The system of claim 29, wherein the first process and the third process and the fourth process comprise the same process.

42. The system of claim 29, wherein the first process and the second process and the third process and the fourth process comprise the same process.

43. The system of claim 29, wherein the resource further comprises a COM server.

44. The system of claim 29, wherein the resource further comprises a COM server of a different version than a second resource residing inside the application isolation environment.

45. The system of claim 29, wherein the identifier is associated with the first resource and a second resource.

46. The system of claim 29, wherein the resource further comprises at least one registry entry in the environment on which the resource resides.

47. The system of claim 29, wherein the resource resides inside a second application isolation environment.

48. The system of claim 29, wherein the first process further comprises making a request for the resource including an identifier associated with the resource.

49. The system of claim 29, wherein the first process further comprises communicating with the instance of the resource residing in the determined location.

50. The system of claim 29, wherein the first process or the second process or the third process or the fourth process further comprise a COM Service Control Manager.

51. A system for accessing, by application programs, resources provided by an operating system, the system comprising:

a resource;

a first process receiving a request for the resource and an identifier associated with the resource;

a second process, executing inside an application isolation environment and determining that the resource resides in a location outside the application isolation environment;

a third process redirecting the request for the resource and the identifier associated with the resource to the determined location; and

a fourth process responding to the request for the resource using an instance of the resource residing in the determined location.

52. The system of claim 51, wherein the first process executes inside the application isolation environment.

53. The system of claim 51, wherein the first process executes outside the application isolation environment.

54. The system of claim 51, wherein the third process executes inside the application isolation environment.

55. The system of claim 51, wherein the third process executes outside the application isolation environment.

56. The system of claim 51, wherein the fourth process executes inside the application isolation environment.

57. The system of claim 51, wherein the fourth process executes outside the application isolation environment.

58. The system of claim 51, wherein the second process and the third process comprise the same process.

59. The system of claim 51, wherein the second process and the fourth process comprise the same process.

60. The system of claim 51, wherein the first process and the second process and the third process and the fourth process comprise the same process.

61. The system of claim 51, wherein the resource further comprises a COM server.

62. The system of claim 51, wherein the resource further comprises a COM server of a different version than a second resource residing on the application isolation environment.

63. The system of claim 51, wherein the identifier is associated with the first resource and a second resource.

64. The system of claim 51, wherein the resource resides inside a second application isolation environment.

65. The system of claim 51, wherein the resource further comprises at least one registry entry in the environment on which the resource resides.

66. The system of claim 51, wherein the first process further comprises making a request for the resource including an identifier associated with the resource.

67. The system of claim 51, wherein the first process further comprises communicating with the instance of the resource residing in the determined location.

68. The system of claim 51, wherein the first process or the second process or the third process or the fourth process further comprise a COM Service Control Manager.

69. A system for accessing, by application programs, resources provided by an operating system, the system comprising:

a resource;

a first process receiving a request for the resource and an identifier associated with the resource;

a second process determining that the resource resides in a location outside an application isolation environment;

a third process, executing inside the application isolation environment and redirecting the request for the resource and the identifier associated with the resource to the determined location; and

a fourth process responding to the request for the resource using an instance of the resource residing in the determined location.

70. The system of claim 69, wherein the first process executes inside the application isolation environment.

71. The system of claim 69, wherein the first process executes outside the application isolation environment.

72. The system of claim 69, wherein the second process executes inside the application isolation environment.

73. The system of claim 69, wherein the second process executes outside the application isolation environment.

74. The system of claim 69, wherein the fourth process executes inside the application isolation environment.

75. The system of claim 69, wherein the fourth process executes outside the application isolation environment.

76. The system of claim 69, wherein the first process and the second process and the third process and the fourth process comprise the same process.

77. The system of claim 69, wherein the resource further comprises a COM server.

78. The system of claim 69, wherein the resource further comprises a COM server of a different version than a second resource residing inside the application isolation environment.

79. The system of claim 69, wherein the identifier is associated with the first resource and a second resource.

80. The system of claim 69, wherein the resource resides inside a second application isolation environment.

81. The system of claim 69, wherein the resource further comprises at least one registry entry in the application isolation environment inside which the resource resides.

82. The system of claim 69, wherein the first process further comprises making a request for the resource including an identifier associated with the resource.

83. The system of claim 69, wherein the first process further comprises communicating with the instance of the resource residing in the determined location.

84. The system of claim 69, wherein the first process or the second process or the third process or the fourth process further comprise a COM Service Control Manager.

85. A system for accessing, by application programs, resources provided by an operating system, the system comprising:

a resource;

a first process receiving a request for the resource and an identifier associated with the resource;

a second process determining that the resource resides in a location outside an application isolation environment;

a third process redirecting the request for the resource and the identifier associated with the resource to the determined location; and

a fourth process, executing inside the application isolation environment and responding to the request for the resource using an instance of the resource residing in the determined location.

86. The system of claim 85, wherein the first process executes inside the application isolation environment.

87. The system of claim 85, wherein the first process executes outside the application isolation environment.

88. The system of claim 85, wherein the second process executes inside the application isolation environment.

89. The system of claim 85, wherein the second process executes outside the application isolation environment.

90. The system of claim 85, wherein the third process executes inside the application isolation environment.

91. The system of claim 85, wherein the third process executes outside the application isolation environment.

92. The system of claim 85, wherein the resource further comprises a COM server.

93. The system of claim 85, wherein the resource further comprises a COM server of a different version than a second resource residing inside the application isolation environment.

94. The system of claim 85, wherein the identifier is associated with the first resource and a second resource.

95. The system of claim 85, wherein the resource resides inside a second application isolation environment.

96. The system of claim 85, wherein the resource further comprises at least one registry entry in the environment on which the resource resides.

97. The system of claim 85, wherein the first process further comprises making a request for the resource including an identifier associated with the resource.

98. The system of claim 85, wherein the first process further comprises communicating with the instance of the resource residing in the determined location.

99. The system of claim 85, wherein the first process or the second process or the third process or the fourth process further comprise a COM Service Control Manager.