Patent ID: 8447975

Claim:
A method for enforcing programming module security, comprising: defining a plurality of logic classes corresponding to a runtime environment executed on a processor; defining a plurality of security zones, each security zone corresponding to a particular logic class of the plurality of logic classes, wherein the security zones are ranked from high security to low security; associating a plurality of programming modules to the plurality of logic classes by assigning each programming modules to one of the plurality of logic classes: determining a security zone of a particular module when the particular module is loaded on the processor by associating the security zone of the module with the security zone corresponding to the assigned logic, class of the module; enabling a first module of the plurality of modules to access an interface associated with a second module of the plurality of modules wherein the security zone of the logic class associated with the first module is at least equal to the security zone of logic class associated with the second module; establishing an anchor module and associating the anchor module with the logic zone associated with the first module; granting to the second module access to a component programming interface (CPI) to the anchor; granting to the anchor module access to a CPI of the second module; and enabling the second module to access a CPI of a third module in the logic zone associated with the anchor module by virtue. of the second module's access to the CPI of the anchor and the anchor's access to the CPI of the second module.