Patent ID: 7930760
Filing Date: 2011-04-19
Classification: G06F

Abstract:
1. A method comprising: storing a set of rules in a centralized rule database, each rule specifying a set of actions that a subject account has a right to perform with regard to protected resources having canonical names described by a resource name pattern; associating each software process of a device with a chamber in a plurality of chambers, wherein none of the software processes are associated with more than one of the chambers, wherein each chamber in the plurality of chambers is associated with at least one of the software processes; providing a set of service providers that performs an action with regard to one of the protected resources in response to a request from one of the software processes when the centralized rule database includes a rule that grants to an account associated with the chamber associated with the software process a right to perform the action with regard to the one of the protected resources, wherein, for each of the software processes, the software process uses the service providers to perform actions on any of the protected resources that are not associated with the chamber associated with software process; receiving, with a target service provider that is one of the service providers, a request from a requesting software process that is one of the software processes; and performing, with the target service provider in response to the request, an action with regard to a target resource when the centralized rule database includes a rule that grants to a subject account a right to perform the action with regard to the target resource, wherein the target resource is one of the protected resources, and wherein the subject account is an account associated with the chamber associated with the requesting software process.