Computer network running a distributed application

A computer comprising:

• a plurality of separate execution environments as virtual machines;
• a trusted computing platform for providing trust services to each execution environment;
• and
• a store having instructions encoded therein executable by the computer to cause it to:
• i) execute one or more of said local components of the distributed application in a plurality of first virtual machines;
• ii) in one or more other virtual machines shared by the plurality of first virtual machines:
• a) store one or more group membership tokens for said local distributed application components and information indicating which components are entitled to include the group membership tokens in their messages
• b) intercept one or more message transmissions from said local components to other computers in said network
• c) find whether the message-sending local component is entitled to include a group membership token asserting membership of the group with the message,
• d) include the group membership token with the intercepted message if said local component is entitled to the group membership token;
• and
• e) provide an interface that enables a token authority to update said group membership token store in order to change whether said local component is entitled to have said group membership token included with one or more messages.

A computer network comprising a plurality of computers, each hosting one or more local components of a distributed application, wherein said distributed application components interact by passing messages between them in order to perform said distributed application, wherein one or more of said computers comprises:

• a plurality of separate execution environments as virtual machines;
• a trusted computing platform for providing trust services to each execution environment;
• and
• a store having instructions encoded therein executable by the computer to cause it to:
• i) execute one or more of said local components of the distributed application in a plurality of first virtual machines;
• ii) in one or more other virtual machines shared by the plurality of first virtual machines:
• a) store one or more group membership tokens for said local distributed application components and information indicating which components are entitled to include the group membership tokens in their messages
• b) intercept one or more message transmissions from said local components to other computers in said network
• c) find whether the message-sending local component is entitled to include a group membership token asserting membership of the group with the message,
• d) include the group membership token with the intercepted message if said local component is entitled to the group membership token;
• and
• e) provide an interface that enables a token authority to update said group membership token store in order to change whether said local component is entitled to have said group membership token included with one or more messages.

In a computer network hosting a plurality of distributed application components which interact by passing messages between them in order to perform said distributed application, a method of controlling group membership comprising operating at least one computer in said computer network, the computer including a plurality of separate execution environments as virtual machines and a trusted computing platform for providing trust services to each execution environment, the computer being operated to:

• i) execute one or more of said local components of the distributed application in a plurality of first virtual machines;
• ii) in one or more other virtual machines shared by the plurality of first virtual machines:
• a) store one or more group membership tokens for said local distributed application components and information indicating which components are entitled to include the group membership tokens in their messages
• b) intercept one or more message transmissions from said local components to other computers in said network
• c) find whether the message-sending local component is entitled to include a group membership token asserting membership of the group with the message
• d) include the group membership token with the intercepted message if said local component is entitled to the group membership token;
• and
• e) provide an interface that enables a token authority to update said group membership token store in order to change whether said local component is entitled to have said group membership token included with one or more messages.

A non-transitory computer-readable storage medium storing a program to be executed by a computer, the computer including a plurality of separate execution environments as virtual machines and a trusted computing platform for providing trust services to each execution environment, the program instructing the computer to:

• i) execute one or more of said local components of the distributed application in a plurality of first virtual machines;
• ii) in one or more other virtual machines shared by the plurality of first virtual machines:
• a) store one or more group membership tokens for said local distributed application components and information indicating which components are entitled to include the group membership tokens in their messages
• b) intercept one or more message transmissions from said local components to other computers in said network
• c) find whether the message-sending local component is entitled to include a group membership token asserting membership of the group with the message
• d) include the group membership token with the intercepted message if said local component is entitled to the group membership token;
• and
• e) provide an interface that enables a token authority to update said group membership token store in order to change whether said local component is entitled to have said group membership token included with one or more messages.

A method of operating a computer including a plurality of separate execution environments as virtual machines and a trusted computing platform for providing trust services to each execution environment, the method comprising:

• i) creating a first set of virtual machines comprising a plurality of virtual machines on said computer;
• ii) creating a second set of one or more virtual machines on said computer, the second set of virtual machines being shared by the first set of virtual machines;
• iii) running, in the second set of virtual machines, software to cause said computer to:
• a) store one or more group membership tokens for local components of distributed applications, each distributed application being performed by distributed application components which interact by passing messages between them
• b) store information indicating which components are entitled to include the group membership tokens in their messages
• c) intercept one or more message transmissions from said local components to other computers in said network
• d) find whether the message-sending local component is entitled to include a group membership token asserting membership of the group with the message, and
• e) include the group membership token with the intercepted message if said local component is entitled to the group membership token.