Patent ID: 7600024
Filing Date: 2009-10-06
Classification: H04L

Abstract:
1. At a computer system having shared resources, the shared resources sharable among a plurality of sessions, the computer system connected to another computer system over a computer network, the other computer system having one or more devices connected as peripheral devices, a method for tagging a device connected to the other computer system to restrict access to the device, the method comprising: an act of receiving a session establishment request from the other computer system, the session establishment request requesting establishment of a session between the computer system and the other computer system so that the other computer system can access a portion of the shared resources of the computer system; an act of establishing a session between the computer system and the other computer system to allow the other computer system to access the portion of shared resources; an act of assigning a session identifier to the established session, the session identifier differentiating the established session from other sessions of the computer system; an act of receiving a device registration request from the other computer system, the device registration request being a request to register the device for use within the established session to interact with the shared resources; an act of accessing appropriate software to permit the computer system to interface with the device in response to the registration request, wherein the act of accessing appropriate software to permit the computer system to interface with the device comprises an act of Plug and Play mechanisms at least partially automating the accessing of the appropriate software; an act of creating a device entry for the device, the device entry including a session identifier property and other properties, the other properties configured to store device related values representing properties of the device; an act of setting the value of the session identifier property in the device entry to the established session identifier such that access to the device related values can be restricted to processes in the established session; and an act of storing the device entry in a device list, the device list being accessible to a module that performs access checks based on session identifier properties to determine appropriate responses to requests for device related information.