Patent ID: 7636851
Filing Date: 2009-12-22
Classification: G06F

Abstract:
1. A computing device operating based on an operating system instantiated thereon, the operating system having a user logged on thereto, the operating system having: first and second privileges tokens created at the time of logon for each user account, each token associated with a separate session; a first session for the user including a first base process, the first base process of the first session having the first privileges token attached thereto, the first privileges token setting forth privileges of the user that may be applied to the first base process such that the first base process operates only in accordance with the privileges of the user as set forth in the attached first privileges token, the first privileges token of the first base process of the first session including a full set of privileges of the user on the operating system of the computing device; and a second session for the user including a second base process, the second base process of the second session having the second privileges token attached thereto, the second privileges token setting forth privileges of the user that may be applied to the second base process such that the second base process operates only in accordance with the privileges of the user as set forth in the attached second privileges token, the second privileges token of the second base process of the second session including only a minimum set of privileges of the user on the operating system of the computing device, wherein the first privileges token is a full privileges token and the second privileges token is a limited privileges token, the limited token not having all privileges associated with the full token but instead having a limited set of privileges and not extra privileges that could be employed to take actions that would be harmful, deceptive, or malicious.