Patent ID: 8056119

Claim:
A method for executing a target program, comprising: opening, by a hardware processor and in response to a request from a source program, a door between a source container and a global container, wherein the source container is controlled by the global container, wherein the request specifies a target program, and wherein the source container comprises the source program; sending the request to an access module located in the global container using the door; verifying, by the hardware processor, that the request can be executed in a target container using a policy definition, wherein the target program is in the target container and wherein the target container is controlled by the global container; logging in to the target container after the request has been verified; initiating a gateway within the target container in response to the login; setting an execution context of the gateway based on the policy definition; and executing the target program by the hardware processor, using the execution context, to generate a response to the request, wherein the global container is executed by an operating system, wherein the global container comprises the source container, the target container, the door, and the access module, wherein the global container, the source container, and the target container are isolated execution environments, and wherein the door is an inter-process communication mechanism.