Patent ID: 8984529
Filing Date: 2015-03-17
Classification: G06F

Abstract:
1. An apparatus comprising a computing device, the computing device being configured to cause the apparatus to at least: implement a process-based security model on the apparatus, wherein the process-based security model includes at least one set of permissions that defines allowable activities and accessible resources for a process; implement a software application having security attributes, wherein the software application is invoked as a first process and wherein the first process is a separately executing process; implement a plug-in module having security attributes different to, or incompatible with, the security attributes of the application; invoke the plug-in module as a second process, the second process being a separate process from the first process of the software application, wherein the second process is a separately executing process; wherein the software application seeking to invoke the plug-in module verifies the security attributes of the plug-in module before invoking the plug-in module and wherein the plug-in module verifies the security attributes of the application invoking the plug-in module; and pass information from the software application to the plug-in module via a data structure before the plug-in is executed, wherein the information is used as handles to system resources or other objects.