Patent ID: 7739731

Claim:
A machine implemented method for providing security, the method comprising: binding, during installation, an application bundle to a protection domain based on a signor's certificate of the application bundle; executing a first application instance of the application bundle in a first execution context, wherein the first execution context is isolated from other execution contexts by a firewall protecting the first execution context, wherein the first execution context is associated with the protection domain based on the application bundle being bound to the protection domain; receiving, by a firewall protecting a second execution context, an indication that the first application instance seeks access to protected functionality associated with the second execution context, wherein the firewall protecting the second execution context allows access to the protected functionality if the entity seeking access belongs to a protection domain in a set of one or more protection domains; and in response to receiving the indication, determining, by the firewall protecting the second execution context, whether the first application instance has permission to access the protected functionality by: determining the protection domain associated with the first execution context; and determining if the protection domain associated with the first execution context is in the set of one or more protection domains.