RESOURCE ACCESS CONTROL SYSTEM

摘要

A resource access control system that restricts access rights of individual software objects executing in a processing device. A software object is designated as belonging to one or more protection domains. Each protection domain defines permissions to resources accessible by a software object. Resource allocations for a software object can change over time, even while the object is executing. Another advantage that the present approach provide s is that the consumer can download a software object with some of the object' s functionality disabled via resource controls. Later, the same consumer can p ay for additional functionality within the same software object. This is achiev ed by changing the resource control on the software object so that the software object can now access an expanded list of resources. Software objects are associated with a security group ID that associates the object with a particular protection domain.