Method and system for transparently executing code using a surrogate process

• US 5,802,367 A
• Filed: 01/16/1996
• Issued: 09/01/1998
• Est. Priority Date: 07/07/1995
• Status: Expired due to Term

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Sailor, Richard K., Brown, Nathaniel S., Held, Andrew F., Misra, Pradyumna K., Seaman, Michael R. C., Leach, Paul, Jung, Edward K.
• Primary Examiner(s): Oberley, Alvin E.
• Assistant Examiner(s): COURTENAY III, ST JOHN
• Application Number:
  US08/585,511
• Time in Patent Office: 959 Days
• Field of Search: 395/684, 395/685
• US Class Current: 719/332
• CPC Class Codes: G06F 9/445 Program loading or initiating bootstrapping G06F9/4401; security arrangements for program loading or initiating G06F21/57
• CPC Class Codes: G06F 9/44521 Dynamic linking or loading; Link editing at or after load time, e.g. Java class loading
• CPC Class Codes: G06F 9/465 Distributed object oriented systems remote method invocation [RMI] G06F9/548
• CPC Class Codes: G06F 9/4843 by program, e.g. task dispatcher, supervisor, operating system
• CPC Class Codes: G06F 9/544 Buffers; Shared memory; Pipes
• CPC Class Codes: G06F 9/547 Remote procedure calls [RPC]; Web services

Abstract

A method and system for transparently executing code using a surrogate process is provided. In a preferred embodiment, the underlying system provides a surrogate program that can execute server dynamic-link libraries. When a client program wishes to access an object of a sharable class or a class factory object, the client program requests a service control manager to execute the server code for the sharable class. In response, the service control manager determines from a registration database whether the server code is available in the form of a server executable or a server dynamic-link library. If the server code is implemented as a server dynamic-link library, the service control manager either returns the location of the server dynamic-link library to the client program to be run in the execution context of the client program or the service control manager launches the surrogate program and requests it to load the server dynamic-link library, thereby isolating the server dynamic-link library from the client program execution context. When the surrogate process is launched, the surrogate process loads the requested server dynamic-link library and instantiates class factory objects corresponding to the sharable classes implemented by the server dynamic-link library. In one embodiment, multiple server dynamic-link libraries can be loaded within the same surrogate process. According to this embodiment, when the client program requests access to an object of a sharable class or to a class factory object, the service control manager determines whether the server code that implements the object can be loaded in a surrogate process that is already executing or whether a new surrogate process needs to be launched. Once the server dynamic-link library is loaded in the surrogate process and a reference to a server object returned to the client program, the client program can communicate with the server code in the same manner as if the server code had been loaded into the execution context of the client program.

Claims

1. A method in a computer system for invoking server code that is stored in a dynamically linkable library, the computer system having a client process that requests invocation of the server code, the method comprising:

receiving from the client process a request to invoke the server code;

in response to the received request, invoking a surrogate process with a reference to the dynamically linkable library that stores the server code, wherein the surrogate process is an independently executable process for loading server code that is stored in a dynamically linkable library and that can instantiate an object;

loading the referenced dynamically linkable library into the invoked surrogate process;

executing the server code stored in the loaded dynamically linkable library; and

returning to the client process a reference to the executing server code, the returned reference being used by the client process to invoke the server code executing in the surrogate process by executing the same client code that is used to invoke the server code when the server code is executing in the client process.

2. The method of claim 1, the computer system being connected to a remote computer system, and wherein the surrogate process is executed on the remote computer system.

3. The method of claim 2, the server code implemented according to a first architectural model, the client process having client code implemented according to a second architectural model that is incompatible with the first architectural model, the remote computer system having an instruction set that implements the first architectural model of the server code, and wherein the executing of the surrogate process on the remote computer system is performed in order to enable the client code to invoke the server code implemented according to the incompatible architectural model.

4. The method of claim 1, the computer system having a service control manager responsible for process invocation, and wherein receiving from the client process the request to invoke the server code and invoking the surrogate process is performed under the control of the service control manager.

5. The method of claim 4 wherein the computer system is connected to a remote computer system having a second service control manager process, and wherein invoking the surrogate process further comprises:

forwarding the request to invoke the server code to the second service control manager process; and

under control of the second service control manager process, invoking the surrogate process on the remote computer system.

6. The method of claim 4, the computer system being connected to a remote computer system, and wherein the surrogate process is executed on the remote computer system.

7. The method of claim 1, further comprising, under control of the client process, invoking the server code using the returned reference to the executing server code by using the same client code that is used to invoke the server code when the server code is instead loaded in the client process.

8. The method of claim 1, the returning to the client process the reference to the executing server code further comprising:

creating and registering a binding handle that connects directly to the server code; and

returning to the client process a reference to the created binding handle as the reference to the executing server code.

9. A method in a computer system for invoking server code that is stored in a dynamically linkable library, the computer system having a client process that requests invocation of the server code, the method comprising:

receiving from the client process a request to invoke the server code;

in response to the received request, invoking a surrogate process with a reference to the dynamically linkable library that stores the server code, wherein the surrogate process is an independently executable process for loading server code that is stored in a dynamically linkable library and that can instantiate an object;

loading the referenced dynamically linkable library into the invoked surrogate process;

executing the server code stored in the loaded dynamically linkable library;

creating, in the surrogate process, an object instance of a requested type of object implemented by code stored in the referenced dynamically linkable library; and

returning to the client process a reference to a requested interface of the created object instance in the surrogate process, the returned reference being used by the client process to access the requested interface of the created object instance in the surrogate process by executing the same client code that is used to access the requested interface when an instance of the requested type of object is created in the client process.

10. The method of claim 9, further comprising:

under control of the client process,

using the returned reference to the requested interface, requesting invocation of a method of the requested interface; and

transparently forwarding the method invocation request to the surrogate process, which transparently forwards the method invocation request to the created object instance.

11. The method of claim 10, the computer system being connected to a remote computer system, and wherein the surrogate process is executed on the remote computer system and transparently forwarding the method invocation request to the surrogate process transparently forwards the method invocation request to the surrogate process executing on the remote computer system.

12. The method of claim 9, the requested type of object having persistent data and further comprising, before returning the reference to the requested interface, the step of loading the persistent data into the created object instance.

13. The method of claim 9, further comprising, before returning the reference to the requested interface, initializing the created object instance.

14. The method of claim 9, the returning to the client process the reference to the requested interface of the created object instance in the surrogate process further comprising:

creating and registering a binding handle that connects directly to the server code that implements the requested interface of the created object instance; and

returning to the client process a reference to the created binding handle as the reference to the requested interface of the created object instance.

15. A method in a computer system for invoking server code that is stored in a dynamically linkable library, the method comprising:

receiving from a first process a request to invoke the server code;

in response to the received request, invoking a surrogate process with a reference to the dynamically linkable library that stores the server code and with a class identifier, the class identifier identifying a class of objects with common behavior and corresponding to a class factory object, the class factory object implemented by the stored server code and having a creation method for creating an object of the class of objects identified by the class identifier, wherein the surrogate process is an independently executable process for loading server code that is stored in a dynamically linkable library and that can instantiate an object;

loading the referenced dynamically linkable library into the invoked surrogate process;

executing the server code stored in the loaded dynamically linkable library;

creating an instance of the class factory object that corresponds to the class identifier within the invoked surrogate process; and

registering the created class factory object instance so that other processes can create object instances of the class of objects identified by the class identifier using the creation method without knowledge that the class factory object instance is instantiated in a different process, each created object instance being implemented by code that is stored in the linkable library that is loaded in the surrogate process.

16. The method of claim 15, further comprising:

receiving a request from requesting code to create an object instance of the class of objects identified by the class identifier; and

in response to the request, invoking the creation method of the registered class factory object instance within the surrogate process without the requesting code having knowledge that the creation method is being executed within the surrogate process.

17. The method of claim 16 wherein the requesting code to create the object instance is received from a process other than the surrogate process, and further comprising:

after receiving the request to create the object instance, determining whether a class factory object corresponding to the class identifier is registered; and

only when it is determined that the corresponding class factory object is registered, performing the invoking of the creation method of the registered class factory object instance within the surrogate process.

18. The method of claim 16, the computer system being connected to a remote computer system, and wherein the surrogate process is executed on the remote computer system.

20. The method of claim 15, the computer system having a service control manager process responsible for process invocation, and wherein invoking the surrogate process is performed under the control of the service control manager process.

21. The method of claim 20, the computer system being connected to a remote computer system, and wherein the surrogate process is executed on the remote computer system.

22. The method of claim 20 wherein the computer system is connected to a remote computer system having a second service control manager process, and wherein the step of invoking the surrogate process further comprises:

forwarding the request to invoke the server code to the second service control manager process; and

under control of the second service control manager process, invoking the surrogate process on the remote computer system.

23. The method of claim 15, the registering of the created class factory object instance further comprising creating and registering a binding handle to the server code that implements the created class factory object instance.

24. The method of claim 15, further comprising:

creating an object instance of the class of objects identified by the class identifier; and

returning to the first process an indicator to a requested interface of the created object instance, the returned indicator being used by the first process to transparently invoke methods of the requested interface of the created object instance instantiated in the surrogate process.

25. The method of claim 24 wherein the computer system is connected to a remote computer system and wherein the surrogate process is executed on the remote computer system and, further comprising:

receiving a request to create a second object instance of the class of objects identified by the class identifier; and

in response to the received request, transparently invoking the creation method of the registered class factory object instance within the surrogate process.

26. The method of claim 25 wherein the first process from which the request to invoke the server code is received is under the control of a first program, the first program belonging to a security identity for determining the access rights of the first program, wherein the request to create a second object instance is received from a second program, the second program belonging to a security identity for determining the access rights of the second program, and wherein transparently invoking the creation method of the registered class factory object instance within the surrogate process is performed only when the first and second program belong to the same security identity.

27. The method of claim 15 wherein the computer system is connected to a remote computer system, and wherein the invoking of the surrogate process in response to the received request launches the surrogate process on the remote computer system passing the reference to the linkable library and passing the class identifier.

19. A method in a computer system for invoking a server application having server code, the method comprising the computer-implemented steps of:

receiving from a first process a request to invoke the server application;

in response to the received request, invoking a surrogate process with a reference to a dynamically linkable library that contains the server code and with a class identifier, the class identifier identifying a class of objects with common behavior and corresponding to a class factory object, the class factory object implemented by the contained server code and containing a creation method for creating an object of the class of objects identified by the class identifier;

loading the referenced dynamically linkable library into the surrogate process;

executing the server code contained in the loaded dynamically linkable library;

creating an instance of the class factory object within the surrogate process corresponding to the class identifier;

registering the created class factory object instance so that other processes can create object instances of the class of objects identified by the class identifier using the creation method without knowledge that the class factory object instance is instantiated in a different process, each created object instance being implemented by code in the linkable library loaded in the surrogate process;

receiving a request from requesting code to create an object instance of the class of objects identified by the class identifier; and

in response to the request, invoking the creation method of the registered class factory object instance within the surrogate process without the requesting code having knowledge that the creation method is being executed within the surrogate process, wherein the first process from which the request to invoke the server application is received is under the control of a first program, the first program belonging to a security identity for determining the access rights of the first program, wherein the requesting code from which the request to create an object instance is received is part of a second program, the second program belonging to a security identity for determining the access rights of the second program, and wherein invoking the creation method of the registered class factory object instance within the surrogate process is performed only when the first and second program belong to the same security identity.

28. A method in a computer system for invoking server code, the method comprising:

receiving a request from a client process to invoke the server code;

in response to the received request, determining whether the server code is already executing;

when it is determined that the server application is not already executing, determining whether a standalone executable program for the server code exists;

when it is determined that no standalone executable program exists, determining whether there exists executable code for the server code that is stored in a linkable library and whether it is desired to execute the server code in a process other than the client process;

when it is determined that executable code for the server code exists in a linkable library and it is desired to execute the server application in the process other than the client process, invoking a surrogate process with a reference to the linkable library and a list of class identifiers, each class identifier identifying a class of objects with common behavior and corresponding to a class factory object, each class factory object implemented by code that is stored in the referenced linkable library and having a creation method for creating an object of the class of objects identified by the class identifier, wherein the surrogate process is an independently executable process for loading server code that is stored in a dynamically linkable library and that can instantiate an object; and

under control of the invoked surrogate process,

loading the referenced linkable library; and

for each class identifier in the list of class object identifiers,

creating an instance of the corresponding class factory object within the surrogate process; and

registering the created class factory object instance so that other processes can create object instances of the class of objects identified by the class identifier using the creation method.

29. The method of claim 28 wherein the determining of whether it is desired to execute the server application in a process other than the client process is determined at the discretion of the server application.

30. The method of claim 28 wherein the determining of whether it is desired to execute the server application in a process other than the client process is determined at the discretion of the client process.

31. The method of claim 28, further comprising, after determining whether a standalone executable program for the server application exists, when it is determined that the standalone executable program exists, launching the standalone executable program.

32. The method of claim 28, the computer system having a service control manager responsible for process invocation, and wherein the determining of what code to invoke as the server code and invoking the determined code are performed under the control of the service control manager.

33. The method of claim 28, the computer system being connected to a remote computer system, and wherein the surrogate process is executed on the remote computer system.

34. A method in a computer system for invoking a plurality of server applications, each server application implemented by executable server code that is stored in a linkable library, the method comprising:

in response to a request to invoke a first server application, invoking a surrogate process with a reference to the linkable library that stores the server code that implements the first server application; and

under control of the surrogate process, loading the referenced linkable library that stores the server code that implements the first server application;

in response to a request to invoke a second server application, determining whether the linkable library that stores the server code that implements the second server application contains trusted is code;

when it is determined that the linkable library that stores the server code that implements the second server application contains trusted code, requesting the already executing surrogate process to load the linkable library that contains trusted code that implements the second server application; and

loading the linkable library that contains the trusted code that implements the second server application into the already executing surrogate process.

35. The method of claim 34, further comprising:

when it is determined that the linkable library that stores the server code that implements the second server application does not contain trusted code, invoking a second surrogate process; and

under control of the second surrogate process, loading the referenced linkable library that stores the server code that implements the second server application.

36. The method of claim 34 wherein the determining of whether the linkable library that stores the server code that implements the second server application contains trusted code further comprises determining whether the linkable library that stores the server code that implements the second server application can be executed in the same process as the linkable library that stores the server code that implements the first server application.

37. The method of claim 36 wherein the request to invoke the first server application is performed under the control of a first program, the first program belonging to a security identity for determining the access rights of the first program, wherein the request to invoke the second server application is performed under the control of a second program, the second program belonging to a security identity for determining the access rights of the second program, and wherein the determining of whether the linkable library that stores the server code that implements the second server application contains trusted code further comprises:

determining whether the first program belongs to the same security identity as the second program; and

when it is determined that the first and second programs belong to the same security identity, reaching a result that the linkable library that stores the server code that implements the second server application contains trusted code.

38. The method of claim 36 wherein the determining of whether the stored code that implements the second server application can be executed in the same process is performed by table look up.

39. The method of claim 34 wherein the request to invoke the first server application is performed under the control of a first program, the first program belonging to a security identity for determining the access rights of the first program, wherein the request to invoke the second server application is performed under the control of a second program, the second program belonging to a security identity for determining the access rights of the second program, and wherein the determining of whether the linkable library that stores the server code that implements the second server application contains trusted code comprises:

determining whether the first program belongs to the same security identity as the second program;

when it is determined that the first and second programs belong to the same security identity, reaching a result that the linkable library that stores the server code that implements the second server application contains trusted code.

40. The method of claim 34, the computer system having a service control manager responsible for process invocation, and wherein invoking the surrogate process is performed under the control of the service control manager.

41. The method of claim 40, the computer system being connected to a remote computer system, and wherein the surrogate process is executed on the remote computer system.

42. The method of claim 40 wherein the computer system is connected to a remote computer system having a second service control manager process, and wherein the step of invoking the surrogate process further comprises the substeps of:

forwarding the request to invoke the server application to the second service control manager process; and

under control of the second service control manager process, invoking the surrogate process on the remote computer system.

43. The method of claim 34, the computer system being connected to a remote computer system, and wherein the surrogate process is executed on the remote computer system.

44. The method of claim 34 wherein requesting the already executing surrogate process to load the linkable library that contains the trusted code that implements the second server application further comprises:

providing a list of class identifiers to the already executing surrogate process, each class identifier identifying a class of objects with common behavior and corresponding to a class factory object, each class factory object implemented by code residing in the linkable library that contains the trusted code that implements the second server application, each class factory containing a creation method for creating an object of the class of objects identified by the class identifier; and

wherein the loading of the linkable library that contains the trusted code that implements the second server application into the surrogate process further comprises;

for each class identifier in the provided list of class object identifiers,

creating an instance of the corresponding class factory object within the surrogate process; and

registering the created class factory object instance so that other processes can create object instances of the class of objects identified by the class identifier using the creation method.

45. The method of claim 44, further comprising:

receiving a request from requesting code to create an object instance of the class of objects identified by a requested class identifier; and

in response to the received request to create the object instance, invoking the creation method of the registered class factory object instance within the surrogate process without the requesting code having knowledge that the creation method is being executed within the surrogate process.

46. A method in a computer system for unmarshaling a marshalled object, the marshalled object containing a class identifier identifying a class of objects with common behavior and unmarshaling code, the unmarshaling code being implemented by server code that corresponds to the class identifier, the method comprising:

determining whether custom unmarshaling is required to unmarshal the marshalled object, wherein custom unmarshaling refers to unmarshaling code that implements an unmarshaling process that is specific to the server code;

when it is determined that custom unmarshaling is required, determining the class identifier of the marshalled object;

determining whether there exists a linkable library that contains executable server code that corresponds to the determined class identifier;

when it is determined that the linkable library exists, invoking a surrogate process with a reference to the linkable library, wherein the surrogate process is an independently executable process for loading server code that is stored in a dynamically linkable library and that can instantiate an object; and

under control of the invoked surrogate process, loading the linkable library and executing the custom unmarshaling code in the loaded linkable library to unmarshal the marshalled object in a server code-specific manner.

47. The method of claim 46, the class identifier of the marshalled object identifying a class factory object, and further comprising, under control of the surrogate process, creating an instance within the surrogate process of the class factory object identified by the determined class object identifier.

48. The method of claim 47, the created class factory object instance having a creation method for creating an object of the class of objects identified by the determined class identifier, and further comprising registering the created class factory object instance so that other processes can use the creation method to create object instances of the class of objects identified by the determined class identifier without knowledge that the class factory object instance is instantiated in a different process.

49. The method of claim 46, the class identifier of the marshalled object identifying a class factory object, the class factory object having a creation method for creating an object of the class of objects identified by the class identifier and further comprising:

under control of the surrogate process,

creating an instance of the class factory object;

using the creation method of the created class factory object to create an object instance of the class of objects identified by the determined class identifier;

copying data from the marshalled object into the created object instance; and

returning an indicator to a requested interface of the created object instance.

50. A method in a computer system for invoking a server application having server code implemented according to a first architectural model from client code implemented according to a second architectural model, the client code executing in a client process, the method comprising the computer-implemented steps of:

receiving from the client process a request to invoke the server application;

in response to the received request, determining whether the first architectural model of the server code is compatible with the second architectural model of the client code, such that the server code can be executed in the client process;

when it is determined that the first architectural model of the server code is not compatible and cannot be executed in the client process, invoking a surrogate process with a reference to a dynamically linkable library that contains the server code implemented according to the first architectural model, the surrogate process providing an emulation of a computer system having an instruction set that implements the first architectural model;

loading the referenced dynamically linkable library into the surrogate process;

within the surrogate process, executing the server code implemented according to the first architectural model; and

returning to the client process a reference to the executing server code, the client process using the returned reference to transparently access the server application as if the server code were executing in the client process.

51. The method of claim 50, the computer system being connected to a remote computer system, and wherein the step of invoking the surrogate process invokes and executes the surrogate process on the remote computer system.

52. A computer system for invoking server code that is stored in a dynamically linkable library, the computer system comprising:

a surrogate process that is an independently executable process for loading server code that is stored in a dynamically linkable library and that can instantiate an object, and that, in response to being invoked,

loads the dynamically linkable library that stores the server code;

executes the server code; and

returns a reference to a binding handle for the executing server code that can be transparently used by a second process to further invoke the server code without knowledge that the server code is being executed in the surrogate process; and

an invocation mechanism that, in response to a request to invoke the server code, invokes the surrogate process with a reference to the dynamically linkable library.

53. A computer system for invoking server code that is stored in a dynamically linkable library, the computer system comprising:

a class factory object identified by class identifier and implemented by server code stored in the linkable library, the class identifier identifying a class of objects with common behavior and containing a creation method for creating an object of the class;

a surrogate process that is an independently executable process for loading server code that is stored in a dynamically linkable library and that can instantiate an object, and that in response to being invoked,

loads the linkable library that stores the server code;

creates an instance of the class factory object within the surrogate process;

registers a binding handle for the created class factory object instance so that other processes can create object instances of the class without knowledge that the class factory object and creation method is executing in the surrogate process; and

an invocation mechanism that, in response to a request to invoke the server code, invokes the surrogate process with a reference to the linkable library and the class identifier.

54. The system of claim 53 wherein the surrogate process is invoked on a remote computer system.

55. The system of claim 53 wherein the surrogate process further uses the creation method of the created class factory object to create an instance of an object of the class of objects identified by the class identifier and returns a reference to a binding handle for the created object instance.

56. A computer system for invoking a plurality of server applications, each server application implemented by executable code contained in a linkable library, the computer system comprising:

a surrogate process that,

in response to invocation, loads the linkable library containing code implementing a first server application and,

in response to a request to load the linkable library implementing a second server application, loads the linkable library containing code implementing the second server application; and

an invocation mechanism that,

in response to a request to invoke the first server application, invokes the surrogate process with a reference to the linkable library containing code implementing the first server application,

in response to a request to invoke the second server application, determines whether the linkable library containing code implementing the second server application contains trusted code, and when the invocation mechanism determines that the linkable library containing code implementing the second server application contains trusted code, requests the invoked surrogate process to load the linkable library containing the trusted code implementing the second server application.