Patent ID: 8127133
Filing Date: 2012-02-28
Classification: G06F

Abstract:
1. One or more computer-readable storage media encoded with computer-executable instructions to perform a method of performing an enforcement operation on an object, wherein the one or more computer-readable storage media are not a signal, the method comprising: receiving, from a program, a request for an operation on an object, wherein said object is associated with at least one label, said at least one label associated with a plurality of policies, wherein each policy of said plurality of policies corresponds to a respective policy decision engine of a plurality of policy decision engines, each respective policy decision engine being configured to apply the corresponding policy to said object, based on said association between the object and the at least one label and said association between the at least one label and the plurality of policies, to determine a result as to whether the operation is allowed to proceed on the object; in response to the request dispatching each policy of the plurality of policies associated with the at least one label to said respective policy decision engine where the policy decision engine takes one or more actions in enforcement of the corresponding policy; collecting results from the policy decision engine of each policy of the plurality of policies associated with the at least one label, said results comprising information indicating whether said operation is allowed; determining, based on said results, that said operation is allowed; and allowing said operation to proceed.