Patent ID: 8108519
Filing Date: 2012-01-31
Classification: G06F

Abstract:
1. In a computing system, a method of facilitating secure communication between processes that operate outside of an operating-system space where an operating system operates for said computing system, by using a communication component that also operates outside of said operating-system space, wherein said method comprises: obtaining, by said communication component, communication data indicative of a communication message from a first process to a second process, wherein said first and second processes both operate outside of said operating-system space of said computing system; obtaining, by said communication component, for said communication data, first operating-system data from the operating-system space pertaining to said first process, wherein said first operating-system data is effectively provided and/or originated by said operating-system and includes information including a first process identifier that can effectively be used to make an access control decision regarding said communication data that is and based on the first process identifier associated with said first process, thereby allowing access to said communication data to be effectively controlled based on the information provided and/or originated by said operating system and an identity of the first process; and controlling by said communication component said communication data, Inter-Process Communication (IPC) messages wherein the access control decision is based at least in part on the first process identifier residing in the operating-system space.