Patent ID: 8799928

Claim:
A system comprising: one or more computers configured to provide: a service registry including respective entries for each of a plurality of service modules, wherein each entry includes data identifying the respective service module and at least one system service provided by the respective service module; a secure runtime environment configured to execute a first native code module according to a first security policy that specifies permissions for the first native code module to access system services; a discovery service configured to: receive a request for access to a first system service from the first native code module; examine entries of the service registry to identify a first service module that provides the first system service; examine the first security policy to determine whether the first security policy restricts access to the first system service from the first native code module; and select the first service module to provide the first system service to the first native code module if the first security policy does not restrict access to the first system service from the first native code module; and a limited runtime environment configured to execute the first service module with a first set of reduced privileges, wherein the first set of reduced privileges restricts access from the first service module to resources on the system.