Patent ID: 8789159
Filing Date: 2014-07-22
Classification: G06F

Abstract:
1. A method for creating a secure process on a web server, the method comprising: creating an application manager process, the application manager process obtaining a first file handle for a file; creating a second file handle for the file, the second file handle being a duplicate of the first file handle, the second file handle having restricted access to memory of the web server; creating a plurality of application host processes, each of the plurality of the application host processes being created under control of the application manager process; providing the second file handle to an application host process, wherein file data is written to the second file handle; running one or more legacy applications on one or more of the application host processes, each of the one or more legacy applications running in a separate application host process; restricting privileges and groups of the application host processes so that privileges and groups of each application host process are different than privileges and groups of the one or more legacy applications running on the application host processes; and assigning a unique logon identifier to each application host process so that each application host process can only communicate with the application manager process.