Techniques for permitting access across a context barrier on a small footprint device using an entry point object
First Claim
Patent Images
1. A small footprint device comprising:
- a. at least one processing element;
b. memory, c. a context barrier for isolating one program module from at least one other program module using said memory and processing element, said one program module and said at least one other program module configured to operate on said small footprint device; and
d. an entry point object for permitting one program module to access one other program module across said context barrier.
2 Assignments
0 Petitions
Accused Products
Abstract
A small footprint device can securely run multiple programs from unrelated vendors by the inclusion of a context barrier isolating the execution of the programs. The context barrier performs security checks to see that principal and object are within the same context or to see that a requested action is authorized for an object to be operated upon. Each program or set of programs runs in a separate context. Access from one program to another program across the context barrier can be achieved under controlled circumstances by using an entry point object.
-
Citations
27 Claims
-
1. A small footprint device comprising:
-
a. at least one processing element;
b. memory, c. a context barrier for isolating one program module from at least one other program module using said memory and processing element, said one program module and said at least one other program module configured to operate on said small footprint device; and
d. an entry point object for permitting one program module to access one other program module across said context barrier. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 21, 22, 23)
-
-
11. A method of operating a small footprint device, comprising:
-
separating program modules using a context barrier, said program modules configured to operate on said small footprint device; and
permitting access to information across the context barrier using an entry point object. - View Dependent Claims (12, 24)
-
-
13. A method of permitting access to information on a small footprint device from a first program module to a second program module separated by a context barrier, comprising:
-
creating entry point object which may be accessed by at least two program modules configured to operate on said small footprint device; and
using said entry point object to permit access to information across the context barrier.
-
-
14. A computer program product, comprising:
-
a. a memory medium; and
b. a computer controlling element comprising instructions for implementing a context barrier on a small footprint device and for bypassing said context barrier using an entry point object, said context barrier separating program modules configured to operate on said small footprint device. - View Dependent Claims (15)
-
-
16. A computer program product, comprising:
-
a. a memory medium; and
b. a computer controlling element comprising instructions for separating a plurality of programs configured to operate on a small footprint device by running them in respective contexts and for permitting one program to access information from another program by way of an entry point object. - View Dependent Claims (17)
-
-
18. A carrier wave carrying instructions for implementing an entry point object for bypassing a context barrier on a small footprint device over a communications link, said context barrier separating program modules configured to operate on said small footprint device.
-
19. A carrier wave carrying instructions over a communications link for separating a plurality of programs configured to operate on a small footprint device by running them in respective contexts and for permitting one program to access information from another program using at least one entry point object.
-
20. A method of transmitting code over a network, comprising transmitting a block of code from a server, said block of code comprising instructions for implementing an entry point object for bypassing a context barrier on a small footprint device over a communications link, said context barrier separating program modules configured to operate on said small footprint device.
-
25. An apparatus for operating a small footprint device, comprising:
-
means for separating program modules using a context barrier, said program modules configured to operate on said small footprint device; and
means for permitting access to information across the context barrier using an entry point object. - View Dependent Claims (26)
-
-
27. An apparatus for permitting access to information on a small footprint device from a first program module to a second program module separated by a context barrier, comprising:
-
means for creating entry point object which may be accessed by at least two program modules configured to operate on said small footprint device; and
means for using said entry point object to permit access to information across the context barrier.
-
Specification