Patent ID: 7676813
Filing Date: 2010-03-09
Classification: G06F,Y10S

Abstract:
1. A method for accessing resources provided by an operating system, the method comprising the steps of: (a) receiving a request for a resource comprising an out-of-process COM server, by an application program executing inside an isolation environment comprising an application isolation layer and a user isolation layer, and a first isolation scope provided by one of the application isolation layer and user isolation layer; (b) acquiring a first identifier associated with the requested resource; (c) determining an association between the first identifier identifying the out-of-process COM server and a second identifier associated with an instance of the requested resource, the association comprising a mapping from the first identifier and the application isolation layer to a dynamically generated class identifier, wherein the second identifier refers to a second isolation scope associated with the requested resource, the second isolation scope provided by one of the application isolation layer and user isolation layer; (d) redirecting the request for the resource to the identified instance of the resource, responsive to the second identifier; and (e) responding to the request for the resource using the instance of the resource in the second isolation scope.