Method and system for application isolation

• US 8,880,732 B1
• Filed: 02/25/2011
• Issued: 11/04/2014
• Est. Priority Date: 02/25/2011
• Status: Active Grant

• Current Assignee: Marvell Asia Pte Limited (Marvell Technology Group Limited)
• Original Assignee: QLogic Corporation (Marvell Technology Group Limited)
• Inventors: Sarcar, Kanoj
• Primary Examiner(s): Vostal, O. C.
• Application Number:
  US13/035,114
• Time in Patent Office: 1,348 Days
• Field of Search: 709/245, 707/796, 707/802, 707/803, 707/811, 707/812, 707/830, 707/831
• US Class Current: 709/245
• CPC Class Codes: G06F 15/16 Combinations of two or more digital computers each having at least an arithmetic unit, a program unit and a register, e.g. for a simultaneous processing of several programs coordinating program control therefor G06F9/52; in regulating and control system G05B
• CPC Class Codes: G06F 16/955 using information identifiers, e.g. uniform resource locators [URL]
• CPC Class Codes: G06F 21/82 Protecting input, output or interconnection devices
• CPC Class Codes: H04L 61/30 Managing network names, e.g. use of aliases or nicknames name-to-address mapping H04L61/45
• CPC Class Codes: H04L 61/457 containing identifiers of data entities on a computer, e.g. file names
• CPC Class Codes: H04M 3/42076 where the identifier is a Uniform Resource Locator
• CPC Class Codes: H04M 3/42119 where the identifier is a Uniform Resource Locator

Abstract

Method and system for application isolation is provided. A computing system executes a plurality of processor executable applications and each application is assigned an address by an adapter that is operationally coupled to the computing system. The adapter also assigns a unique identifier to each construct generated by the plurality of applications; maintains a data structure associating the address with the unique identifier assigned to each construct; receives a request having an address and a unique identifier from an application from among the plurality of applications; retrieves the address and the unique identifier from the request; compares the retrieved address and the unique identifier with information maintained by the data structure; and processes the request if the retrieved address and the unique identifier matches with information of the data structure.

Claims

1. A machine implemented method for processing requests from a plurality of processor-executable applications executed by a computing system coupled to a network device used for communicating with another device, comprising:

the network device assigning an address to each of the plurality of applications to access a register that is associated with a storage device used for storing a plurality of commands for the plurality of applications;

the network device assigning a unique identifier to each construct generated by each of the plurality of applications for sending information to the another device;

maintaining a data structure at the network device for associating the address assigned to each of the plurality of applications with the unique identifier assigned to each construct;

the network device receiving a request having an address and a unique identifier from an application from among the plurality of applications;

the network device retrieving the address and the unique identifier from the request;

the network device comparing the retrieved address and the unique identifier with information maintained by the data structure; and

the network device processing the request when the retrieved address and the unique identifier matches with information of the data structure.

2. The method of claim 1, wherein the network device is a network adapter that assigns the address to each of the plurality of applications and the unique identifier to each of the plurality of constructs.

3. The method of claim 1, wherein the assigned address is to access a register that is used by the plurality of applications for sending requests.

4. The method of claim 1, wherein the network device is a network adapter for processing storage traffic complying with a storage protocol and network traffic complying with a network protocol.

5. The method of claim 1, wherein the network device is an adapter configured to process information complying with a storage protocol.

6. The method of claim 3, wherein the register is used by a plurality of constructs and is associated with another storage location for storing commands from the plurality of applications.

7. The method of claim 1, wherein the data structure is stored at a memory device of the network device.

8. A machine implemented method, comprising:

a device interfacing with a computing system for receiving a request having an address for a storage location and a unique identifier assigned by the device to an application from among a plurality of processor executable applications executed by the computing system;

the device comparing the received address and the unique identifier with information maintained by a data structure at the device for associating unique identifiers assigned to a plurality of constructs with unique addresses assigned to the plurality of applications; and

the device processing the request when the received address and the unique identifier matches the information maintained by the data structure.

9. The method of claim 8, wherein the device is a network adapter that assigns the address to each of the plurality of applications and the unique identifier to each of the plurality of constructs.

10. The method of claim 8, wherein the storage location is a register that is used by the plurality of applications for sending requests.

11. The method of claim 8, wherein the device is a network adapter for processing storage traffic complying with a storage protocol and network traffic complying with a network protocol.

12. The method of claim 8, wherein the device is an adapter configured to process information complying with a storage protocol.

13. The method of claim 10, wherein the register is used by a plurality of constructs and is associated with another storage location for storing commands from the plurality of applications.

14. A system, comprising:

a computing system having a processor for executing a plurality of applications, where each application is assigned an address by an adapter operationally coupled to the computing system to access a register that is associated with a storage device used for storing a plurality of commands for the plurality of applications;

wherein the adapter having a processor assigns a unique identifier to each construct generated by each of the plurality of applications for sending information to another device;

maintains a data structure associating the address assigned to each application with the unique identifier assigned to each construct;

receives a request having an address and a unique identifier from an application from among the plurality of applications;

retrieves the address and the unique identifier from the request;

compares the retrieved address and the unique identifier with information maintained by the data structure; and

processes the request when the retrieved address and the unique identifier matches with information of the data structure.

15. The system of claim 14, wherein the assigned address is to access a register that is used by the plurality of applications for sending requests.

16. The system of claim 14, wherein the adapter is configured for processing both network and storage traffic.

17. The system of claim 14, wherein the adapter is network interface card.

18. The system of claim 14, wherein the adapter includes a module for maintaining the data structure and assigning the unique handle.

19. The system of claim 15, wherein the register is used by a plurality of constructs and is associated with another storage location for storing commands from the plurality of applications.

20. The system of claim 14, wherein the data structure is stored at a memory device of the adapter.