Patent ID: 6757685
Filing Date: 2004-06-29
Classification: G06F,Y10S

Abstract:
A process for executing a downloadable service with specific access rights to at least one profile file in a user's computer, said computer comprising a web browser communication to the Internet or intranet via a first communication port and socket, said process being characterized in that it involves the steps of:arranging a confined run time environment which is assigned a second communication port and socket and providing restricted access to at least one profile file; downloading said service through said second communication port so that it is received by said confined run time environment; executing said service within said confined run time environment whereby said service is given an access to said at least one profile file in a secure environment, said confined run time environment comprising an extended sandbox having restrictive access to said at least one profile file; downloading a signed archive file which is received via said second communication port; checking the signature of the archive file and, if corrupted, discarding said archive file; and selecting one particular secure class loader corresponding to said signature for the purpose of creating additional security java classes allowing the restricted access to said at least one profile file.