Patent ID: 7698741

Claim:
A computer-implemented method of creating a private namespace, the method comprising: (a) receiving a request to create a private namespace that contains data for defining a boundary of the private namespace; (b) determining, by a processor, whether a principle associated with a current process has security attributes that are alleged in the request; (c) if the principle that is associated with the current process has the security attributes that are alleged in the request, creating, by the processor, a container object that is uniquely identified by the data that defines the boundary of the private namespace; (d) in response to a call that is associated with a second principle to open the private namespace, if the container object has attributes that match data received in the call to open the private namespace, making, by the processor, the container object available to the second principle, wherein the security attributes associated with the principle define a boundary that defines a context in which the container object was created.