Desktop security
AssigneeMicrosoft Corporation
InventorsHirofumi Yamamoto, Mohamed E. Fathalla, Yashabh Sethi, Richard B. Ward
Life of this patent
Estimating the term…
Abstract
In aspects, interactions between processes of a desktop are allowed or denied based on security data. The security data may comprise a first bitmap that indicates whether a requesting process is allowed to cause an action to occur, a second bitmap that indicates whether a process is protected from having an action occur, and a third bitmap that indicates whether the requesting process may override protection, if any, in causing the action to occur.
Claims19
A computer-readable storage medium having stored computer-executable instructions which, when executed by a processor of a computing system, perform a method comprising:
- from a requester, receiving a request to perform an action related to a desktop;
- determining whether the requestor has rights to perform the action based at least in part on security data related to the request, wherein the security data comprises protecting others data, protecting from others data, and overriding data;
- and
- if the requestor has rights to perform the action, allowing the action.
In a computing environment, a method, comprising:
- receiving a request to perform an action related to a process related to a desktop executing on a computer;
- reading, from a memory, security data related to the request, wherein the security data comprises protecting others data, protecting from others data, and overriding data;
- and
- allowing or denying the action based on a software check of the security data.
In a computing environment, an apparatus, comprising:
- a processor;
- a desktop;
- a memory storing security data arranged to indicate whether an interaction between processes is allowed, wherein the security data comprises a portion that indicates whether a process is allowed to cause a requested action, a portion that indicates whether a process is protected from the requested action, and a portion that indicates whether a process is allowed to override a protection from the requested action;
- and
- a security process executing on the processor arranged to access the security data in determining whether a first desktop process is allowed to interact with a second desktop process as requested by the first desktop process.
Dependencies are inferred from the claim text.