Patent ID: 9064111
Filing Date: 2015-06-23
Classification: G06F

Abstract:
1. A method of providing security enforcements of widgets in a computer system having a processor and a memory, comprising: extracting access control information from a widget process requesting a service, generating one or more access control rules customized for the widget process, and providing the access control rules to a trusted portion of the computer system outside of a user code space of a Web Runtime (WRT) system; and for any static access control rule, delegating security checking of the widget process from the WRT system to the trusted portion of the computer system, wherein the trusted portion of the computer system uses the access control rules for security checking of the widget process, and wherein the WRT system is modified to generate one or more static access control rules and convert the static access control rules into a form that is compatible with the trusted portion of the computer system based on system requirements and type of technology used by the trusted portion of the computer system, the WRT system is configured to dynamically adjust, based on a particular access control rule, which one of the WRT system and the trusted portion of the computer system performs security checking of the widget process.