发明申请
US20070005961A1 Providing user on computer operating system with full privileges token and limited privileges token
有权
在计算机操作系统上为用户提供完全权限令牌和有限权限令牌
- 专利标题: Providing user on computer operating system with full privileges token and limited privileges token
- 专利标题(中): 在计算机操作系统上为用户提供完全权限令牌和有限权限令牌
-
申请号: US11171744申请日: 2005-06-30
-
公开(公告)号: US20070005961A1公开(公告)日: 2007-01-04
- 发明人: Jeffrey Hamblin , Jonathan Schwartz , Kedarnath Dubhashi , Klaus Schutz , Peter Brundrett , Richard Ward , Thomas Jones
- 申请人: Jeffrey Hamblin , Jonathan Schwartz , Kedarnath Dubhashi , Klaus Schutz , Peter Brundrett , Richard Ward , Thomas Jones
- 申请人地址: US WA Redmond
- 专利权人: Microsoft Corporation
- 当前专利权人: Microsoft Corporation
- 当前专利权人地址: US WA Redmond
- 主分类号: H04N7/16
- IPC分类号: H04N7/16 ; H04L9/32 ; G06F17/30 ; H04L9/00 ; G06F7/04 ; G06K9/00 ; H03M1/68 ; H04K1/00
摘要:
An operating system for a computing device has a first session for a user that includes a first base process that has a first privileges token attached thereto. The first privileges token includes substantially a full set of privileges of the user on the operating system. The operating system also has a second session for the user that includes a second base process that has a second privileges token attached thereto. The second privileges token is derived from the first privileges token and includes only a minimum set of privileges of the user on the operating system. Thus, the second, limited token does not have all privileges associated with the first, full token but instead has a limited set of privileges and not extra privileges that could be employed to take actions that would be harmful, deceptive, or malicious.
公开/授权文献
信息查询