Patent ID: 8347085

Claim:
A method comprising: assigning to a program an integrity label that allows the program to write to first data, wherein the privacy label is based on a first characteristic of the program; assigning to the program a privacy label that allows the program to read from second data, wherein the privacy label is based on a second characteristic of the program, where the assignings are performed by a security program that comprises another privacy label and another integrity label, and where the security program is restricted from assigning privacy labels or integrity labels of a value greater than the another privacy label and the another integrity label respectively; and determining, by a computer in response to the program seeking to write to the first data, whether to grant or deny the seeking to write the first data based on the integrity label relative to a label associated with the first data, or determining, by the computer in response to the program seeking to read from the second data, whether to grant or deny the seeking to read from the second data based on the privacy label relative to a label associated with the second data.