RESTRICTING COMMUNICATION OF SELECTED PROCESSES TO A SET OF SPECIFIC NETWORK ADDRESSES

• US 20080162730A1
• Filed: 02/04/2008
• Published: 07/03/2008
• Est. Priority Date: 02/14/2000
• Status: Active Grant

• Current Assignee: Longhorn HD LLC (Alpha Alpha Intellectual Partners LLC)
• Original Assignee: Digital Asset Enterprises LLC (Intellectual Ventures LLC)
• Inventors: Goyal, Pawan
• Granted Patent: US 7,739,401 B2
• Time in Patent Office: Days
• US Class Current: 709/249
• CPC Class Codes: G06F 2209/542 Intercept
• CPC Class Codes: G06F 9/468 Specific access rights for resources, e.g. using capability register
• CPC Class Codes: G06F 9/4843 by program, e.g. task dispatcher, supervisor, operating system
• CPC Class Codes: G06F 9/544 Buffers; Shared memory; Pipes

Abstract

Selected processes are associated with sets of specific network addresses, and the associations are stored. When a selected process creates a child process, an association between the child process and the set of network addresses with which the parent process is associated is stored. When a selected process is deleted, the association between the selected process and its set of network addresses is deleted. Each selected process is restricted to network address-based communication via its associated set of network addresses. Certain communication protocol subroutines associated with network address-based communication are intercepted by an interception module. The interception module detects attempts by selected processes to communicate via network addresses. If a selected process attempts to communicate via an unassociated network addresses, the attempted communication is prohibited.

Claims

1-56. -56. (canceled)

57. A method in a computer system for efficiently managing communication via a set of specific, multiple network addresses, the method comprising:

associating at least one selected process with a set of specific, multiple network addresses;

associating a separate communication channel with each one of the multiple network addresses;

detecting an attempt by a selected processes to receive an incoming request to initiate a communication session on one of the communication channels;

identifying a first one of the communication channels that is ready to receive the incoming request; and

allowing reception of the incoming request on the identified communication channel.

58-90. -90. (canceled)

91. A computer program product for efficiently managing communication via multiple network addresses, the computer program product comprising:

program code for associating a selected process with a set plurality of network addresses;

program code for associating a separate communication channel with each of the plurality of network addresses;

program code for detecting an attempt by the selected process to receive an incoming request to initiate a communication session on one of the plurality of communication channels;

program code for identifying one of the plurality of communication channels that is ready to receive the incoming request;

program code for allowing reception of the incoming request on the identified communication channel; and

a computer readable medium on which the program codes are stored.

92-93. -93. (canceled)

94. A method in a computer system for efficiently managing communication via a set of specific, multiple network addresses, the method comprising:

associating at least one selected process with a set of specific, multiple network addresses;

associating a separate communication channel with each one of the multiple network addresses;

identifying a first one of the communication channels that is available for communication; and

allowing communication to proceed via the identified communication channel.

95. A computer program product for efficiently managing communication via multiple network addresses, the computer program product comprising:

program code for associating a selected process with a plurality of network addresses;

program code for associating a separate communication channel with each of the plurality of network addresses;

program code for identifying a first one of the plurality of communication channels that is available for communication;

program code for allowing communication to proceed via the identified communication channel; and

a computer readable medium on which the program codes are stored.

96. A computing system for efficiently managing communication via multiple network addresses, comprising:

a network address association subsystem that associates a selected process with a plurality of network addresses;

a network address association subsystem that associates a separate communication channel which each of the plurality of network addresses;

a detection subsystem that detects an attempt by the selected process to receive an incoming request to initiate a communication session on one of the plurality of communication channels;

an identification subsystem that identifies one of the plurality of communication channels that is ready to receive the incoming request; and

a receipt permission subsystem that allows reception of the incoming request on the identified communication channel.

97. A computing system for efficiently managing communication via multiple network addresses, comprising:

a network address association subsystem that associates a selected process with a plurality of network addresses;

a network address association subsystem that associates a separate communication channel with each of the plurality of network addresses;

an identification subsystem that identifies one of the plurality of communication channels that is available for communication; and

a communication permission subsystem that allows communication to proceed via the identified communication channel.