Patent ID: 7810153

Claim:
One or more computer-storage media comprising computer-executable instructions for executing an application, the computer-executable instructions comprising instructions for: identifying an application ID associated with the application, the application ID being a strong application ID or a weak application ID, identifying a strong application ID comprising querying a database containing information indicating applications having strong application IDs for a match, the database additionally associating user IDs and application IDs for which legitimate reason for access to protected data is known, the strong application ID comprising a text name plus a public key and a digital signature; verifying the application ID, wherein verifying the application ID comprises utilizing cryptography to verify the application ID is a strong application ID; creating a new process in response to successful verification of the application ID; associating the new process with a new security token comprising the identified application ID and a user ID, wherein the associating comprises creating the new security token using input from an existing security token, creating the new security token from the existing security token comprising: running a first process on an interactive desktop; generating the existing security token as part of a process of logging a user on; responding to an attempt by the first process to create the application by accessing, by operation of an API, the existing security token, together with information from an application info store; and creating, by operation of the API, the new security token for the application, the new security token comprising all information from the existing security token augmented with an application ID of the application, the application ID being provided by the application info store from data obtained from an application manifest; and allocating resources to the new process, upon execution of the new process having either a strong ID or a weak ID, the allocating being based at least in part on whether the application ID is verified as a strong application ID or a weak application ID, such that if a strong application ID was established, more resources are allocated than if a weak application ID was established.