Patent ID: 9712530
Date: 2017-07-18
CPC Classifications: G06F,H04L

Claim:
1. A method of filtering access to a resource in a device, the method comprising: using a computer processor, controlling access to the resource from an application based upon a policy, comprising: providing the policy to an object firewall; translating the policy into one or more settings for the object firewall; filtering, via the object firewall in the device, inter-process communications access to a first object from a second object associated with the application, wherein the first object provides access to the resource through one or more inter-process control paths, wherein the object firewall is configured via the policy to govern interprocess communications to the first object, wherein the object firewall is the only object firewall for the first object, and wherein the object firewall is not an object firewall for any object other than the first object; and wherein controlling access to the resource comprises at least one of permitting and blocking access to the resource in response to the policy, wherein at least one of permitting and blocking access to the resource further comprises at least one of permitting the inter-process communications without modification, permitting the inter-process communications with modified contents of the inter-process communications, permitting the inter-process communications with a modified return value of data sent from a resource in response to the inter-process communications, blocking the inter-process communications, logging the inter-process communications, ignoring the inter-process communications, modifying one or more firewall rules, adding one or more firewall policies, and removing one or more firewall policies.