Patent ID: 7587594

Claim:
A method of managing trust in an operating system of a computing device, said method comprising: receiving a request from a client application in a client execution environment executing in the operating system to create a server component object, said client application being executable in the client execution environment, said server component object having predefined properties associated therewith for providing services to the client application in the operating system of the computing device, said request specifying a requested execution environment for the server component object to be executed in the same operating system, said requested execution environment comprising one or more of the following: in-process, out-of-process, and remote; analyzing the predefined properties associated with the server component object to determine whether an execution environment privilege associated with the server component object matches the requested execution environment; if the determined execution environment privilege matches the requested execution environment, granting the received request to execute the server component object in the requested execution environment; and if the determined execution environment privilege does not match the requested execution environment, executing the server component object in a surrogate execution environment, said surrogate execution environment being different from the client execution environment and the requested execution environment.