Patent ID: 8631482
Filing Date: 2014-01-14
Classification: G06F,H04L

Abstract:
1. A computer-implemented method for managing resources accessed by a program in a restricted operating environment, the method comprising: receiving, at a resource manager of an operating system of a data processing system, a first request from a first program for a ticket that represents permission to access a resource of the data processing system; in response to the first request, determining, based upon a first security profile of the first program, one or more access rights indicating how the resource can be accessed by the first program, including, in the ticket, information that identifies the resource, and the one or more access rights indicating how the resource can be accessed by the first program; issuing the ticket for accessing the resource to the first program when the first program is entitled to access the resource; transferring the ticket that represents permission to access the resource to a second program, wherein the resource manager is configured to allow the second program to access the resource according to the one or more access rights specified in the ticket, the first program is a trusted program with respect to the resource manager, and the second program is a sandboxed program executed in a sandboxed environment that is configured to not otherwise be entitled to access the resource based on a second security profile associated with the second program.