Unshared scratch space

A computer-readable medium having computer-executable instructions for performing steps that cause a local computer to provide unshared storage space on a persistent storage medium to a process executing on behalf of an identity, the steps comprising:

• determining the identity on which behalf the process is executing;
• obtaining a digital certificate for the process, the digital certificate specifying a request for local capabilities including local storage space on the persistent storage medium for the identity;
• decoding the digital certificate to establish local capabilities requested for the identity;
• allocating the local storage space to the process as specified by the local capability request;
• associating the local storage space with the identity;
• and
• limiting access to the persistent storage by the program to the allocated local persistent storage space.

A computer-readable medium having stored thereon a data structure associated with an identity, the data structure comprising:

• a first data field containing data that uniquely identifies the identity;
• a second data field containing data representing local storage capabilities requested for the identity identified by the first data field, the local storage capabilities including a size of a local storage space on a persistent storage medium of the local computer;
• and
• executable code for executing a process on behalf of the identity identified by the data in the first data field, wherein the process is constrained by the local storage capability request represented by data in the second data field to have unshared access to only local storage space allocated as specified in the request on the persistent storage medium.

A computerized system comprising:

• a server operative for transferring executable code for a process using a communications medium;
• and
• a client operative for receiving the process, for determining an identity for the process, and for decoding an infrastructure component identified by the identity to determine a local persistent storage space capability limiting the process to unshared access to an amount of local persistent storage on the client, the client comprising a local persistent storage medium for retaining data used by the process;
• the client further operative for assigning local storage space on the persistent storage medium to the process and for monitoring the use of the local persistent storage medium by the process for compliance with the requested capability.

A computerized client that manages local space allocated on a local computer to a process, the computerized client comprising:

• a persistent storage medium;
• a client storage manager module operative for determining an identity and local persistent storage capability for the process when executed on the client, and allocating local space on the persistent storage medium for unshared access by the process as requested for the identity;
• and
• a client monitor module operative for monitoring access by the process to the persistent storage medium and limiting access to the persistent storage medium by the process to said unshared access to the allocated local space.