Source engine for transferring a resource to local secure cache

• US 7,287,251 B1
• Filed: 10/16/2003
• Issued: 10/23/2007
• Est. Priority Date: 10/16/2003
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Mensching, Rob, Cheff, Terri
• Primary Examiner(s): Khatri; Anil
• Application Number:
  US10/687,730
• Time in Patent Office: 1,468 Days
• Field of Search: 717168-178, 709220-223
• US Class Current: 717/174
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57

Abstract

A source engine system in a computing system retrieves a program code resource from one of a plurality of sources of program code. The program code resource is retrieved and placed in secure cache in the computing system. A user profile is impersonated by the computing system so that the computing system follows the user profile during retrieval of the resource. A source for the resource is picked, and the resource is opened. Whether the user has access to the resource is tested based on the user profile. If the user has access, the resource is read to the secure cache. The resource is written into the secure cache and verified that it is same as the resource in the source. If the user does not have access, a new source for the resource is picked, and the resource in the new source opened and read to the secure cache if the user has access to the resource in the new source.

Claims

1. In a computer system, a method for retrieving a resource of program code from a source of program code and placing the resource in secure cache in the computer system, the computer having a computing system profile, the method comprising:

installing a user profile into the computer system to operate based on the user profile rather than the computing system profile;

picking a first source for the resource;

opening the resource;

impersonating, by the computer system, the user profile at the first source;

testing the computer system'"'"'s access to the resource based on the user profile, wherein the first source tests whether the user, rather than the computing system, has access to the resource;

if the user has access, reading the resource to the secure cache;

if the resource is read to the secure cache, writing the resource to the secure cache of the computer system; and

if the user does not have access, picking a second resource.

2. The method of claim 1 further comprising:

verifying the resource written in secure cache is same as resource in source.

3. The method of claim 1 further comprising:

opening the resource in the second source; and

reading the resource to the secure cache if the user has access to the resource in the second source.

4. The method of claim 3 further comprising:

writing the resource into the secure cache; and

verifying the resource written in secure cache is same as resource in source.

5. The method of claim 4 further comprising:

un-impersonating the user profile to return the computing system to the system profile.

6. A source engine system, in a computing system having a computing system profile, for retrieving a program code resource from one of a plurality of sources of program code for a user with a user profile, the source engine system comprising:

an open resource module for opening a program code resource in a source if the user has access;

a pick source module picking a second source for the resource program code if the user does not have access;

a read data module providing the program code resource to a writer module;

the writer module writing the program code resource into the secure cache of the computing system; and

wherein the source engine system loads the user profile to impersonate the user profile rather than the computing system profile during retrieval of the program code resource and returns to the computing system profile after the program code resource is written to a secure cache.

7. The system of claim 6 further comprising:

an extractor module extracting a program code resource contained within another program code resource.

8. The system of claim 7 further comprising:

a verify module verifying the program code resource in the secure cache matches the program code resource in the source; and

a delete module deleting the program code resource from secure cache if the program code resource in the secure cache does not match the program code resource in the source.

9. The system of claim 8 further comprising:

a mark module marking the program code resource available to the computing system if the program code resource is verified by the verify module.

10. A computer storage medium for storing a computer process having computer-executable instructions executing a method for caching a resource in a secure cache in a computing system having a computing system profile, the method comprising:

loading a user profile into the computing system;

replacing the computing system profile with the user profile;

determining if a user has access to a resource according to the user profile;

reading the resource from a source of program code if the user profile indicates the user has access;

writing the resource into a secure cache when the resource is read from the source of program code; and

removing the user profile and returning to the system profile after writing the resource into cache.

11. The computer readable medium of claim 10 wherein the computer process further comprises:

detecting whether or not the resource is in the secure cache;

verifying the resource if the resource is in the secure cache; and

deleting the resource from secure cache if the resource is not verified.

12. The computer readable medium of claim 11 wherein the computer process further comprises:

testing whether the resource is contained in a second resource if the resource is not in the secure cache; and

extracting the resource from the second resource if the resource is contained in the second resource.

13. The computer readable medium of claim 10 wherein the act of reading comprises:

opening the resource in a first source if the user has access to the resource in the first source;

picking a second source for the resource if the user does not have access to the resource in the first source; and

opening the resource in the second source.

14. The computer readable medium of claim 10, wherein the act of writing a resource further comprises:

verifying the resource written into the secure cache matches the resource in the source.

15. The computer readable medium of claim 14, wherein the act of writing a resource further comprises:

deleting the resource written into the secure cache if the resource does not match the resource in the source.

16. The computer readable medium of claim 14, wherein the act of writing a resource writes the resource into the secure cache while the resource is being read from the source.