Patent ID: 9594898
Date: 2017-03-14
CPC Classifications: G06F

Claim:
1. A method comprising: detecting execution of a command to execute a process to access a securable object; determining, before execution of the process to access the securable object, if one or more rules apply to the process to access the securable object based on one or more criteria; authenticating, in accordance with the one or more applicable rules, a user that initiated the execution of the command to execute the process; modifying, in accordance with the one or more applicable rules and in response to successful authentication of the user, a process token of the process to access the securable object to change an integrity level or at least one of a permission, and a privilege with which to execute the process to access the securable object; wherein the modification of the process token of the process to access the securable object is performed through a privilege manager; when a user sets the integrity level, verifying an identity of the user setting the integrity level via the privilege manager and requesting a justification from the user setting the integrity level; accessing the modified process token of the process to access the securable object to determine the at least one changed permission, changed privilege, or changed integrity level with which to execute the process to access the securable object; executing the process to access the securable object using the modified process token; and allowing access to the securable object based, at least in part, on the execution of the process to access the securable object.