Patent ID: 8646044

Claim:
An integrity level method, comprising: creating a user token when a user logs onto a computer system, the user token containing a user integrity level; assigning a process a process integrity level, the process being executable in the computer system, the process integrity level being based on at least an integrity level of software at which the software would be executed by the process; executing the process at an execution integrity level, the execution integrity level being based on a comparison between the user integrity level and the process integrity level; assigning an object in the computer system an object integrity level, the object integrity level being added to a system access control list; and in response to receiving a request to access the object made by the user, granting access to the object based on a comparison between the object integrity level and an integrity level designator associated with the request, the integrity level designator being based on the user integrity level contained in the user token, the process integrity level, and the execution integrity level.