Patent ID: 7840964

Claim:
A method comprising: a privileged system layer in a virtualization enabled platform enabling a communication portal for executing a service requested by a first component, between the first and a second component of the platform, wherein the first component executes in a first virtual machine on the platform and the second component executes in a second virtual machine on the platform; performing validation by the privileged system layer that the second component is authorized to execute at least one service on behalf of the first component, further comprising: retrieving a portal index and local name for the second component from an outbound portal connector descriptor of the first component, translating the local name for the second component into a global name for the second component using a using a name translation table maintained by the privileged system layer, retrieving an inbound portal connector descriptor comprising a local name for a source component from the second component, the second component associated with the portal index and translated global name for the second component, translating the local name for the source component into a global name for the source component using a using a name translation table maintained by the privileged system layer, comparing the translated global name for the source component to the global name for the first component to ensure a match; and validating by the privileged system layer that the second component is authorized to execute the requested service, further comprising: comparing a portal validator to an activity descriptor to ensure that the requested service is authorized, wherein the activity descriptor comprises a range descriptor.