Polymorphic virtual appliance rule set

摘要

A domain manager system as disclosed herein can control the selective activation of multiple independently-operable execution environments or domains on a computing device in accordance with one or more policies. In some embodiments, activation of a domain may at least temporarily transform a general purpose computing device into a specific purpose computing device or “appliance” by disabling use of one or more shared system resources by other domains.

主权项

1. A method for temporarily transforming a general purpose computing device into a specific-purpose appliance, the method comprising, with the computing device:
detecting an event on the computing device, and in response to the event:
identifying a shared system resource of the computing device to which a specific-purpose appliance application needs exclusive access while the specific-purpose appliance application is activated on the computing device, the shared system resource comprising hardware coupled to the computing device;enabling the identified shared system resource for use by the specific-purpose appliance application;disabling use of the identified shared system resource by other executable components on the computing device;activating the specific-purpose appliance application if the identified shared system resource is enabled for use by the specific-purpose appliance application and the identified shared system resource is disabled for the other executable components; anddeactivating at least one of the other executable components in response to determining that the at least one of the other executable components is in conflict with the specific-purpose appliance application,wherein the conflict is based on the at least one of the other executable components requiring exclusive access to the shared system resource.