Patent ID: 7680758
Filing Date: 2010-03-16
Classification: G06F,Y10S

Abstract:
1. A method for isolating access by application programs to native resources provided by an operating system, the method comprising instructing a suitably programmed computer to perform the steps of: (a) redirecting to an isolation environment comprising a user isolation layer and an application isolation layer a request for a native resource provided by an operating system and stored in a memory element provided by a computer, the request made by a process executing on behalf of a first user; (b) failing to locate in the memory element an instance of the requested resource associated with a user isolation scope provided by the user isolation layer on behalf of a first user; (c) redirecting the request to the application isolation layer; (d) locating in the memory element an instance of the requested native resource associated with an application isolation scope provided by the application isolation layer; and (e) responding to the request for the native resource using the instance of the requested native resource located in the memory element and associated with the application isolation scope.