Operating system abstraction and protection layer

• US 7,451,451 B2
• Filed: 07/20/2004
• Issued: 11/11/2008
• Est. Priority Date: 05/16/2001
• Status: Expired due to Fees

• Current Assignee: General Instrument Corporation (CommScope Holding Company, Inc.), Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Softricity Inc (Microsoft Corporation)
• Inventors: Schaefer, Stuart
• Primary Examiner(s): Ho; Andy
• Application Number:
  US10/894,668
• Publication Number:
  US 20040268361A1
• Time in Patent Office: 1,575 Days
• Field of Search: 719/310, 718/104
• US Class Current: 719/310
• CPC Class Codes: G06F 9/54 Interprogram communication

Abstract

The present invention provides a system for creating an application software environment without changing an operating system of a client computer, the system comprising an operating system abstraction and protection layer, wherein said abstraction and protection layer is interposed between a running software application and said operating system, whereby a virtual environment in which an application may run is provided and application level interactions are substantially removed. Preferably, any changes directly to the operating system are selectively made within the context of the running application and the abstraction and protection layer dynamically changes the virtual environment according to administrative settings. Additionally, in certain embodiments, the system continually monitors the use of shared system resources and acts as a service to apply and remove changes to system components. The present thus invention defines an “Operating System Guard.” These components cover the protection semantics required by DLLs and other shared library code as well as system device drivers, fonts, registries and other configuration items, files, and environment variables.

Claims

1. A method for protecting computer programs from inconsistent run-time conditions, comprising:

executing a protective program on a software platform wherein the software platform comprises a single operating system and configuration information required by the single operating system to operate properly, the protective program providing a customized logically protected run-time environment for running one or more application programs, wherein said customized logically protected run-time environment appears to each of the one or more application programs to be an installation environment without performing an installation whereby a “

pseudo installation”

is created in which at least one of the settings are brought into the respective logically protected run-time environment at the time the one or more application programs execute and wherein the protective program comprises a virtual registry that provides a full function registry to each of the one or more application programs;

running a first application program on the software platform;

providing the first application program with a first run-time environment and a first set of services configured to the first application program via the protective program;

running a second application program on the same software platform as the first application program without modifying the software platform;

providing the second application program with a second run-time environment and a second set of services configured to the second application program via the protective program;

wherein the first run-time environment and first set of services are different from the second run-time environment and second set of services, respectively, thereby the protective program providing the first and second application programs with different operating contexts within the same, unmodified software platform.

2. The method of claim 1, wherein the operating system is a Windows-based operating system.

3. The method of claim 1, wherein a first data file contains data and configuration information for providing the first run-time environment and a second data file contains data and configuration information for providing the second run-time environment, said first data file being different than said second data file.

4. The method of claim 1, wherein if an attempt is made to modify the software platform by the first application, the modification occurs only in the first run-time environment and wherein if an attempt is made to modify the software platform by the second application, the modification occurs only in the second run-time environment.

5. The method of claim 1, wherein a modification to the software platform does not interfere or modify the behavior of the first and second run-time environments.

6. The method of claim 1, wherein the protective program intercepts a first operating system request from the first application such that the first operating system request does not interfere or modify the behavior of the second application and the protective program intercepts a second operating system request from the second application such that the second operating system request does not interfere or modify the behavior of the first application.