Patent ID: 6918126
Filing Date: 2005-07-12
Classification: G06F

Abstract:
1. An apparatus comprising: at least one processor; a memory coupled to the at least one processor; a plurality of object oriented classes residing in the memory, at least one of the plurality of object oriented classes including state data that indicates a protected class; a catalog of allowed classes residing in the memory, the catalog of allowed classes including all classes that are authorized to access at least one protected class; and a state/domain checker residing in the memory and executed by the at least one processor, the state/domain checker performing a plurality of checks when each of the plurality of object oriented classes is loaded, the plurality of checks determining whether a class being loaded accesses the at least one protected class, and if so, determining whether the class being loaded is included in the catalog of allowed classes, and generating an exception if the class being loaded is not included in the catalog of allowed classes, wherein the state/domain checker further performs at least one runtime check when a method that may reference a dynamically defined class is invoked and when a function is invoked that could potentially access a method on one or more of the plurality of classes.