Method and system for applying a policy to binary data

• US 6,408,326 B1
• Filed: 04/20/1999
• Issued: 06/18/2002
• Est. Priority Date: 04/20/1999
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Downer, Joel W., Larsson, Jeffrey E., Glerum, Kirk A.
• Primary Examiner(s): Meky, Moustafa M.
• Application Number:
  US09/295,050
• Time in Patent Office: 1,155 Days
• Field of Search: 709/200, 709/201, 709/202, 709/203, 709/217, 709/218, 709/219
• US Class Current: 709/201
• CPC Class Codes: G06F 16/9017 using directory or table look-up use of a directory or look-up table in file systems G06F16/13

Abstract

Applying a system policy for a program module to binary-formatted data within registry of a computer system operating within an administered computer network environment. At program launch, a program can search a particular location in registry to locate certain registry values maintained at that registry location. The program enumerates the name/value pairs maintained at that registry location. These registry values typically have a format that describes an offset defining a location within a global data structure and the number of binary bits that can be processed at that data structure location. In this manner, registry data values maintained within a predetermined location of the registry can be encoded to include content that supports the application of a system policy to the binary values maintained in the global data structure. Although the application of system policy will change the original value stored at the specified location within the global data structure, this original value can be recorded prior to translating the policy value into a bit mask that can be applied to the data structure. At the conclusion of the program session, any changes applied to the global data structure can be rolled back to the original values to enable these original values to persist for subsequent use during another program session.

Claims

1. A computer-implemented process for applying a system policy to binary data for a program module operating on a client computer within an administered network environment, comprising the steps:

locating a selected one of the keys corresponding to a policy parameter within a registry of the client computer;

obtaining a registry parameter for the selected key, the registry parameter having a predetermined format defining (1) a value name comprising an offset value for a binary data structure and a size value and (2) a data value; and

identifying a control region of the binary data structure based on the offset value and the size value and setting the control region to the data value.

2. The computer-implemented process of claim 1 further comprising the step setting the control region of the binary data structure to the data value in response to initiating a launch of the program module.

3. The computer-implemented process of claim 1 further comprises the step of adding to a list of policy changes a record of an original binary data item in the control region prior to setting the control region to the data value of the registry parameter.

4. The computer-implemented process of claim 3 further comprising the steps:

responsive to initiating a termination of a session of the program,

obtaining the record containing the original binary data item from the list of policy changes;

replacing the data value of the registry parameter with the original binary data item listed in the record; and

saving the content of the binary data structure to non-volatile memory of the computer.

5. The computer-implemented process of claim 1, wherein the offset value identifies a start position for the control region within the binary data structure, the control region representing a binary data location having a value controllable by the system policy.

6. The computer-implemented process of claim 5, wherein the size value defines the extent of the control region with the binary data structure.

7. A computer-readable medium for storing a policy program having instructions which, when executed by a computer, apply a system policy to binary data for a program module by performing the steps:

(a) obtaining a policy parameter for the system policy;

(b) locating a selected one of the keys corresponding to the policy parameter within a registry of the computer;

(c) enumerating all registry values for the selected key, each registry value comprising (1) a value name defining an offset value for a binary data structure and a size value and (2) a data value; and

(d) for each one of the registry values, identifying a control region of the binary data structure based on the offset value and the size value and replacing an original binary data item in the control region to the data value.

8. The computer-readable medium of claim 7, wherein the policy program comprises further instructions which, when executed by the computer, repeat steps (c)-(d) for each one of the remaining keys corresponding to the policy parameter.

9. The computer-readable medium of claim 7, wherein the policy program comprises further instructions which, when executed by the computer, perform the step of creating a temporary record of the original binary data item for the control region of the binary data structure prior to replacing the original binary data with the data value for one of the registry values.

10. The computer-readable medium of claim 9, wherein the policy program comprises further instructions which, when executed by the computer, perform the steps:

responsive to initiating a termination of a session of the program,

obtaining the original binary data item from the record;

replacing the data value for one of the registry values with the original binary data item obtained from the record; and

saving the binary data structure to non-volatile memory of the computer.

11. The computer-readable medium of claim 7, wherein the offset value identifies a start position for the control region within the binary data structure, the control region representing a binary data location having a value controllable by the system policy, and the size value defines the extent of the control region with the binary data structure.

12. A method for applying a system policy to binary data for a program module, comprising the steps:

(a) responsive to initiating a launch of the program module, locating a selected one of the keys corresponding to a policy parameter within a registry of the computer;

(b) listing all registry values for the selected key, each registry value comprising (1) a value name including an offset value for a binary data structure and a size value and (2) a data value;

for each one of the registry values,

(c) identifying a control region of the binary data structure based on the offset value and the size value;

(d) creating a temporary record for the original binary data item for the control region of the binary data structure;

(e) replacing the original binary data for the control region of the binary data structure with the data value for one of the registry values; and

(f) repeating steps (b)-(e) for each one of the remaining keys corresponding to the policy parameter.

13. The method of claim 12 further comprising the steps:

responsive to initiating a termination of a session of the program,

obtaining the original binary data item from the temporary record;

replacing within the binary data structure the data value for one of the registry values with the original binary data item obtained from the record; and

saving the content of the binary data structure to non-volatile memory of the computer.

14. The method of claim 12, wherein the offset value identifies a start position for the control region within the binary data structure, the control region representing a binary data location having a value controllable by the system policy, and the size value defines the extent of the control region with the binary data structure.

15. A computer-implemented process for applying a system policy to binary data for use during a session of a program module operating on a client computer within an administered network environment, comprising the steps:

(a) responsive to initiating a launch of the program module, obtaining a policy parameter for the system policy, the policy parameter associated with the program module;

(b) locating a selected one of the keys corresponding to the policy parameter within a registry of the computer;

(c) obtaining at least one registry value for the selected key, the registry value having formatted content defining a control region within the binary data structure and a data value;

(d) creating a temporary record for the original binary data item maintained in the control region of the binary data structure;

(e) replacing the original binary data for the control region of the binary data structure with the data value for the registry value;

(f) responsive to initiating a termination of the session of the program, obtaining the original binary data item from the temporary record;

(g) replacing within the binary data structure the data value for the registry value with the original binary data item obtained from the record; and

(h) saving the content of the binary data structure to non-volatile memory of the computer.

16. The process of claim 15, wherein the formatted content of the registry value defines an offset value and a size value, the offset value identifying a start position for the control region within the binary data structure and the size value defining the extent of the control region with the binary data structure.