Dynamic updating of process policies

A computing device for dynamically changing policies during execution of applications, the device comprising:

• at least one processor;
• and
• a computer-readable storage medium storing:
• for each of the applications, policy information for a process that executes the application in association with the process, the policy information for the process derived from policy information for the application;
• and
• computer-executable instructions that, based on execution by the at least one processor, configure the processor to, for each process that executes one of the applications:
• create a token for the process that is to execute the application, the token including a reference to the stored policy information for the process;
• provide the token to the process, the process configured to provide the token to a service provider;
• and
• while the process is executing the application, modify the stored policy information so that when the process provides the token to the service provider after the policy information has been modified, the reference included in the token is usable by the service provider to access the modified policy information for the process.

One or more computer-readable storage media storing computer-executable instructions that based on execution by a computing device cause the computing device to dynamically modify a security policy during execution of an application by causing the computing device to:

• store security policy information for a process that executes the application, the security policy information derived from the security policy for the application;
• provide a security token to the process, the security token associated with reference information for the security policy information;
• and
• while the process is executing, modify the stored security policy information so that when the process subsequently provides the security token to a service provider, the reference information that the security token is associated with is usable by the service provider to access the modified security policy information for the application.