Patent ID: 8161563

Claim:
A computer-readable storage device having instructions that, responsive to execution by a computing device, cause the computing device to perform operations comprising: blocking Internet-application access to administrative and/or user spaces of the computing device; providing an administrative broker object configured to broker access to the administrative space that is blocked and a user broker object configured to broker access to the user space that is blocked, wherein at least one of the administrative broker object or the user broker object is task-based, at least one of the administrative broker object or the user broker object having a lifetime defined by a task, wherein at least one of the administrative broker object or the user broker object is executed in a separate process than the Internet-application; inspecting a request from the Internet-application to access at least one of the administrative space or the user space by confirming that the request is valid by checking an electronic signature of the Internet-application; modifying at least one of said administrative space with the administrative broker object or said user space with the user broker object in response to receiving a confirmation of credentials; and brokering access to at least one of said administrative space or the user space, wherein the operation of brokering further comprises forcing certain tasks to be called in a defined order to accomplish an action, wherein calls to the tasks comprise parameters that are cached in the administrative broker object or the user broker object and compared with previously or subsequently received parameters received in the defined order.