Abstract:
PROBLEM TO BE SOLVED: To provide at least one implementation that uses a plurality of self-description software artifacts stored in a computer storage medium of one or more software-based computers. SOLUTION: In the implementation, each artifact represents at least a part of a software component (for example, load module, process, application, and operating system component) of a computing system. Each artifact is described by at least one related "manifesto" including metadata declarative description of a related artifact. COPYRIGHT: (C)2006,JPO&NCIPI
Abstract:
PROBLEM TO BE SOLVED: To configure an operating system process, especially a process dynamically assembled, capable of analyzing integrity and security. SOLUTION: Configuration and identification of the operating system process and/or installation of optimization technology are described. According to at least one installation, the operating system process including contents defined by a process manifesto is configured. Once the operating system process has been configured, it is impossible to change it. COPYRIGHT: (C)2006,JPO&NCIPI
Abstract:
Described herein are one or more computer operating environments that include a standard set of web services via a communications network (e.g., the Internet) and a mechanism for extending the standard set of web services to execute one or more extended web services. Since these extended web services may be produced by an unconfirmed or untrusted source (e.g., a third-party software developer), the described computer operating environments isolate the extended web services from the standard set of web services and from the communication network. Furthermore, each extended web service is an isolated process (isoproc) with a limited ability to communicate with other services. In particular, each isoproc's ability to communicate is limited to only associated defined communication channels over which it has express permission to communicate.
Abstract:
Innovative aspects provided herein pertain to digital rights management (DRM) and/or enforcement in conjunction with remote network clouds and services. Digital rights management licenses/rights/policies can be applied to personal files to facilitate worry free remote storage and/or file sharing. These rights can be identity-centric rather than machine centric, thereby facilitating access and usage from any network device anywhere. Various mechanisms are also disclosed to deter assorted uses of content and/or encourage rights acquisition as an alterative or in addition to technologically prohibitive means. Additionally, a system and method are provided that can afford a frictionless marketplace for file distribution, wherein content is protected and freely distributed and identity-centric rights can be purchased to access the content.
Abstract:
Described herein are one or more implementations of an operating system that provides for statically verifiable inter-process communication between isolated processes. Also, described herein are one or more implementations of programming tools that facilitate the development of statically verifiable isolated processes having inter-process communication.
Abstract:
Innovative aspects provided herein pertain to digital rights management ( DRM) and/or enforcement in conjunction with remote network clouds and servic es. Digital rights management licenses/rights/policies can be applied to per sonal files to facilitate worry free remote storage and/or file sharing. The se rights can be identity-centric rather than machine centric, thereby facil itating access and usage from any network device anywhere. Various mechanism s are also disclosed to deter assorted uses of content and/or encourage righ ts acquisition as an alterative or in addition to technologically prohibitiv e means. Additionally, a system and method are provided that can afford a fr ictionless marketplace for file distribution, wherein content is protected a nd freely distributed and identity-centric rights can be purchased to access the content.
Abstract:
In some implementations, the operations of a software system may include the execution of untrusted device drivers. The execution of an untrusted device driver may be initiated when an untrusted device driver that is a set of executable instructions is obtained. A computing resource for the execution of the device driver may be further determined from a device-driver manifest of the untrusted device driver. Computing resources may include one or more of a hardware resource, a memory, an input/output port, an interrupt request line, and an inter-process communication channel. Trusted local access objects may be used by the untrusted device driver to access the computing resources.
Abstract:
Described herein are one or more computer operating environments that include a standard set of web services via a communications network (e.g., the Internet) and a mechanism for extending the standard set of web services to execute one or more extended web services. Since these extended web services may be produced by an unconfirmed or untrusted source (e.g., a third-party software developer), the described computer operating environments isolate the extended web services from the standard set of web services and from the communication network. Furthermore, each extended web service is an isolated process (isoproc) with a limited ability to communicate with other services. In particular, each isoproc's ability to communicate is limited to only associated defined communication channels over which it has express permission to communicate.
Abstract:
En la presente invencion se describen uno o mas ambientes de operacion en computadora que incluyen un grupo estandar de servicios web a traves de una red de comunicacion (por ejemplo la Internet) y un mecanismo para extender el grupo estandar de servicios web para ejecutar uno o mas servicios web extendidos. Ya que estos servicios web extendidos pueden ser producidos a traves de una fuente no confirmada o no confiable (por ejemplo un desarrollador de software de tercera parte), los ambientes de operacion de computo descritos aislan los servicios web extendidos del grupo estandar de servicios web y la red de comunicacion. Ademas, cada servicio web extendido es un proceso aislado (isoproc) con una capacidad limitada para comunicarse con otros servicios. En particular, la capacidad de cada isoproc's para comunicarse esta limitada unicamente a canales de comunicacion definidos asociados a traves de los cuales tiene permiso expreso de comunicarse.
Abstract:
Described herein are one or more computer operating environments that include a standard set of web services via a communications network (e.g., the Internet) and a mechanism for extending the standard set of web services to execute one or more extended web services. Since these extended web services may be produced by an unconfirmed or untrusted source (e.g., a third-party software developer), the described computer operating environments isolate the extended web services from the standard set of web services and from the communication network. Furthermore, each extended web service is an isolated process (isoproc) with a limited ability to communicate with other services. In particular, each isoproc's ability to communicate is limited to only associated defined communication channels over which it has express permission to communicate.