Patent ID: 7096491

Claim:
A method for processing a mobile code application by a host application service provider (ASP) to an end user, and for enforcing access controls based on the user's subscription to local resources that the ASP manages on the user's behalf, the method comprising: receiving at a host ASP a mobile code application from a provider, the provider being a separate entity from the host ASP, the application including a plurality of functional modules and being immediately available to users upon receipt from the provider; receiving at the host ASP a security specification that is generated by the provider and associated with the application, the security specification describing application program interface (API) access conditions and resource access privilege requests; receiving at the host ASP subscription information associated with a user; forming a usage contract between the user and the provider, the user and the provider both being customers of the host ASP; the host ASP dynamically granting, at runtime, limited access to resources managed by the host ASP but owned by the user according to the subscription information associated with the user, wherein the user can subscribe to specific functional modules of the application as opposed to an entire application; and executing the application within a runtime environment of the host ASP using the subscription information on behalf of the user without the user's intervention.