Process for executing a downloadable service receiving restrictive access rights to at least one profile file

• US 8,275,791 B2
• Filed: 07/09/2003
• Issued: 09/25/2012
• Est. Priority Date: 02/19/2001
• Status: Active Grant

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Raffaele, Eric, Brebner, Gavin
• Primary Examiner(s): GORTAYO, DANGELINO N
• Application Number:
  US10/616,582
• Publication Number:
  US 20040025060A1
• Time in Patent Office: 3,366 Days
• Field of Search: 707/10, 707/8, 707/104, 707/9, 707/104.1, 707/782, 707/783, 707/784, 707/822, 709/248, 709/217
• US Class Current: 707/784
• CPC Class Codes: G06F 21/6263 during internet communication, e.g. revealing personal data from cookies
• CPC Class Codes: G06F 9/468 Specific access rights for resources, e.g. using capability register
• CPC Class Codes: Y10S 707/99936 Pattern matching access

Abstract

A process for executing a downloadable service with specific access rights to at least one profile file in a user'"'"'s computer. The web browser is used for accessing a web server through a first set of communication port and socket. Therefore is arranged a confined runtime environment such as for example an extended sandbox (11) and used in Java programming which is assigned a second communication port and sockets and which is used for executing downloadable service with restricted access on at least one profile file. The process can be used for executing services under the form of a signed archive file which signature is used for both validating the archive file and for selecting one particular secure class loader prior to the generation of the compiled code of the service.

Claims

1. A process for executing a downloadable service with specific access rights to at least one profile file in a user'"'"'s computer, said computer comprising a web browser communication to an internet or intranet via a first communication port and socket, said process comprising:

arranging a confined run time environment which is assigned a second communication port and socket and provided with restricted access to said at least one profile file that is located on the user'"'"'s computer;

downloading said service through said second communication port so that it is received by said confined run time environment; and

executing said service within said confined run time environment whereby said service is given restricted access to said at least one profile file.

2. The process according to claim 1 wherein said confined run time environment is an extended sandbox having restrictive access to said at least one profile file.

3. The process according to claim 2 wherein the service is downloaded under the form of a set of java code containing classes structure packaged within a signed archive file;

the service comprising remote Internet data, a list of requested data that are needed to personalise the service, and code to sort remote internet data using request accessible data.

4. The process according to claim 1 wherein said downloadable service is an authentication service cooperating with a master card.

5. A process for executing a downloadable service with specific access rights to at least one profile file in a user'"'"'s computer, said computer comprising a web browser communication to the internet or intranet via a first communication port and socket, said process comprising:

arranging a confined run time environment in said user'"'"'s computer, said confined run time environment being assigned a second communication port and socket and provided with restricted access to said at least one profile file that is located on the user'"'"'s computer;

downloading said service through said second communication port so that it is received by said confined run time environment; and

executing said service within said confined run time environment whereby said service is given restricted access to said at least one profile file.