Type descriptor management for frozen objects
    3.
    发明授权
    Type descriptor management for frozen objects 有权
    键入描述符管理冻结对象

    公开(公告)号:US08316357B2

    公开(公告)日:2012-11-20

    申请号:US12203857

    申请日:2008-09-03

    IPC分类号: G06F9/45

    摘要: The efficient use of type descriptors with frozen objects. A frozen object might actually include several type descriptors, a primary type descriptor that is canonical according to a set of canonicalization rules, and an auxiliary type descriptor that is not identical to the primary type descriptor. The auxiliary type descriptor may be used to access the canonical type descriptor. When performing an operation, if the auxiliary type descriptor can be used to perform the operation, then that auxiliary type descriptor may be used. If the canonical type descriptor is to be used to perform the operation, the auxiliary type descriptor is used to gain access to the canonical primary type descriptor. The primary type descriptor is then used to perform the operation.

    摘要翻译: 类型描述符与冻结对象的有效使用。 一个被冻结的对象实际上可能包含几个类型描述符,根据一组规范化规则是规范的主类型描述符,以及与主类型描述符不相同的辅助类型描述符。 辅助类型描述符可用于访问规范类型描述符。 当执行操作时,如果可以使用辅助类型描述符来执行操作,则可以使用该辅助类型描述符。 如果要使用规范类型描述符来执行操作,则使用辅助类型描述符来访问规范的主类型描述符。 然后使用主类型描述符执行操作。

    TYPE DESCRIPTOR MANAGEMENT FOR FROZEN OBJECTS
    4.
    发明申请
    TYPE DESCRIPTOR MANAGEMENT FOR FROZEN OBJECTS 有权
    冷冻对象的类型描述符管理

    公开(公告)号:US20100058304A1

    公开(公告)日:2010-03-04

    申请号:US12203857

    申请日:2008-09-03

    IPC分类号: G06F9/45

    摘要: The efficient use of type descriptors with frozen objects. A frozen object might actually include several type descriptors, a primary type descriptor that is canonical according to a set of canonicalization rules, and an auxiliary type descriptor that is not identical to the primary type descriptor. The auxiliary type descriptor may be used to access the canonical type descriptor. When performing an operation, if the auxiliary type descriptor can be used to perform the operation, then that auxiliary type descriptor may be used. If the canonical type descriptor is to be used to perform the operation, the auxiliary type descriptor is used to gain access to the canonical primary type descriptor. The primary type descriptor is then used to perform the operation.

    摘要翻译: 类型描述符与冻结对象的有效使用。 一个被冻结的对象实际上可能包含几个类型描述符,根据一组规范化规则是规范的主类型描述符,以及与主类型描述符不相同的辅助类型描述符。 辅助类型描述符可用于访问规范类型描述符。 当执行操作时,如果可以使用辅助类型描述符来执行操作,则可以使用该辅助类型描述符。 如果要使用规范类型描述符来执行操作,则使用辅助类型描述符来访问规范的主类型描述符。 然后使用主类型描述符执行操作。

    System and method providing inlined stub
    5.
    发明授权
    System and method providing inlined stub 有权
    系统和方法提供内联存根

    公开(公告)号:US06980997B1

    公开(公告)日:2005-12-27

    申请号:US09894394

    申请日:2001-06-28

    IPC分类号: G06F17/00

    摘要: A system and method is provided to facilitate communications between object systems. A caller is provided having optimized in-lined functionality when initiating a remote function call between managed and unmanaged object systems, for example. The in-lined functionality includes utilizing direct calls and returns within a calling function. In this manner, pushing additional arguments onto an execution stack because of an external stub reference is mitigated. In addition, one or more code loops can be analyzed to enable stack markers to be “hoisted” and thus pushed a single time instead of each time the calling function executes. Other aspects of the optimized caller provide garbage collection and thread management, security attribute checking on outgoing calls, calling convention considerations, wherein arguments and return values are organized according to the convention utilized by the remote object system, and in-lined marshalling to provide enhanced performance over external stub code references. Code extensibility options can be included enabling functions to be generalized thereby insulating object systems from implementation details of the called functions.

    摘要翻译: 提供了一种系统和方法来促进对象系统之间的通信。 例如,在启动被管理对象系统和非托管对象系统之间的远程函数调用时,提供一个具有优化内嵌功能的调用者。 嵌入式功能包括在调用功能中使用直接调用和返回。 以这种方式,由于外部存根引用将附加参数推送到执行堆栈得到缓解。 此外,可以分析一个或多个代码循环,以使堆栈标记“挂起”,从而推动一次,而不是每次调用函数执行。 优化的呼叫者的其他方面提供垃圾收集和线程管理,对呼出的呼叫的安全属性检查,调用惯例注意事项,其中参数和返回值根据远程对象系统使用的惯例进行组织,并且内联编组以提供增强的 对外部存根代码引用的性能。 可以包括代码可扩展性选项,使得功能得以泛化,从而将对象系统与被调用函数的实现细节隔离。

    System and method providing inlined stub
    6.
    发明授权
    System and method providing inlined stub 有权
    系统和方法提供内联存根

    公开(公告)号:US07680762B2

    公开(公告)日:2010-03-16

    申请号:US11294509

    申请日:2005-12-05

    IPC分类号: G06F7/00 G06F9/44 G06F17/30

    摘要: A system and method is provided to facilitate communications between object systems. A caller is provided having optimized in-lined functionality when initiating a remote function call between managed and unmanaged object systems, for example. The in-lined functionality includes utilizing direct calls and returns within a calling function. In this manner, pushing additional arguments onto an execution stack because of an external stub reference is mitigated. In addition, one or more code loops can be analyzed to enable stack markers to be “hoisted” and thus pushed a single time instead of each time the calling function executes. Other aspects of the optimized caller provide garbage collection and thread management, security attribute checking on outgoing calls, calling convention considerations, wherein arguments and return values are organized according to the convention utilized by the remote object system, and in-lined marshalling to provide enhanced performance over external stub code references. Code extensibility options can be included enabling functions to be generalized thereby insulating object systems from implementation details of the called functions.

    摘要翻译: 提供了一种系统和方法来促进对象系统之间的通信。 例如,在启动被管理对象系统和非托管对象系统之间的远程函数调用时,提供一个具有优化内嵌功能的调用者。 嵌入式功能包括在调用功能中使用直接调用和返回。 以这种方式,由于外部存根引用将附加参数推送到执行堆栈得到缓解。 此外,可以分析一个或多个代码循环,以使堆栈标记“挂起”,从而推动一次,而不是每次调用函数执行。 优化的呼叫者的其他方面提供垃圾收集和线程管理,对呼出的呼叫的安全属性检查,调用惯例注意事项,其中参数和返回值根据远程对象系统使用的惯例进行组织,并且内联编组以提供增强的 对外部存根代码引用的性能。 可以包括代码可扩展性选项,使得功能得以泛化,从而将对象系统与被调用函数的实现细节隔离。

    Structuring an operating system using a service architecture
    7.
    发明授权
    Structuring an operating system using a service architecture 有权
    使用服务体系结构化操作系统

    公开(公告)号:US07434228B2

    公开(公告)日:2008-10-07

    申请号:US11129847

    申请日:2005-05-16

    IPC分类号: G06F13/00

    CPC分类号: G06F9/547

    摘要: An operating system architecture is based on a service model in which active entities (services) are containers for objects having a number of interfaces specified through a contract language that is a subset of the language in which the service is coded. Services may reside in the same address space or may reside in separate address spaces, without changing the programming model or compiled binaries. The location of a service is independent of the location of the service's clients and of services the service calls.

    摘要翻译: 操作系统架构基于服务模型,其中活动实体(服务)是具有通过作为服务被编码的语言的子集的合同语言指定的多个接口的对象的容器。 服务可能驻留在相同的地址空间中,或者可能驻留在单独的地址空间中,而不改变编程模型或编译的二进制文件。 服务的位置独立于服务的客户端和服务调用的服务的位置。

    Method for organizing software so the set of extensions for an extendable application can be run securely
    8.
    发明授权
    Method for organizing software so the set of extensions for an extendable application can be run securely 有权
    组织软件的方法,以便可扩展应用程序的扩展集可以安全地运行

    公开(公告)号:US08539497B2

    公开(公告)日:2013-09-17

    申请号:US11393348

    申请日:2006-03-30

    IPC分类号: G06F9/46 H04L9/32

    CPC分类号: G06F21/53

    摘要: The operating system organizes software so the set of extensions for an extendable application can be dynamically discovered and the extension can be run securely. Extensions are run as separate applications instead of within the extendable application's process. Extensions are discoverable to an activated extendable application by querying a category catalog. A category provides at least a partial description of a contract between an activating software entity and a software entity that is activated by the activating software entity. The category may enumerate a set of configuration settings associated with the contract that may be used to set up an isolated execution environment for the activated software entity. The category may also specify one or more extension points to be used for communication between the activating and activated software entities. The category may also include a list of software entities that implement the category.

    摘要翻译: 操作系统组织软件,可以动态发现可扩展应用程序的扩展集,并且可以安全地运行扩展。 扩展作为单独的应用程序而不是在可扩展应用程序的过程中运行。 通过查询类别目录可以为激活的可扩展应用程序发现扩展。 类别提供激活软件实体和由激活软件实体激活的软件实体之间的合同的部分描述。 该类别可以枚举与可以用于为激活的软件实体建立隔离的执行环境的合同相关联的一组配置设置。 该类别还可以指定用于激活和激活的软件实体之间的通信的一个或多个扩展点。 该类别还可以包括实现该类别的软件实体的列表。

    PROVIDING COM ACCESS TO AN ISOLATED SYSTEM
    9.
    发明申请
    PROVIDING COM ACCESS TO AN ISOLATED SYSTEM 审中-公开
    提供COM访问隔离系统

    公开(公告)号:US20120151467A1

    公开(公告)日:2012-06-14

    申请号:US13400915

    申请日:2012-02-21

    IPC分类号: G06F9/445

    CPC分类号: G06F9/44505

    摘要: The database (namespace) for storing component metadata for an application that is to be run in an isolated environment is isolated by an operating system by storing the component metadata in a local set of information associated with the isolated application instead of in a global namespace. The operating system utilizes this local metadata instead of the global database when components are employed. Registration data for components is placed within a manifest, enabling the operating system to determine the relationship between an application and a component or set of components used by the application.

    摘要翻译: 用于存储要在孤立环境中运行的应用程序的组件元数据的数据库(命名空间)由操作系统隔离,通过将组件元数据存储在与隔离应用程序相关联的本地信息集中而不是全局命名空间中。 当使用组件时,操作系统使用这个本地元数据而不是全局数据库。 组件的注册数据放在清单中,使操作系统能够确定应用程序与应用程序使用的组件或组件之间的关系。

    Operating system context isolation of application execution
    10.
    发明授权
    Operating system context isolation of application execution 有权
    操作系统上下文隔离应用程序执行

    公开(公告)号:US09038071B2

    公开(公告)日:2015-05-19

    申请号:US11393495

    申请日:2006-03-30

    IPC分类号: G06F21/53 G06F9/46

    CPC分类号: G06F21/53 G06F9/468

    摘要: The resources needed by an application to execute are declared by the application. When the application is activated, only the declared resources are made available to the application because only the declared resources are connected to the execution environment. Accessibility to resources may be controlled by the operating system by making the resource visible or invisible to the executing software by mapping a local name used by the executing software to a global resource, possibly limiting the type of access allowed. Because the executing software relies on the mapping function performed by the operating system for access to resources, and the operating system only maps names declared by the software, the operating system can isolate the software, and prevent the application from accessing undeclared global resources.

    摘要翻译: 应用程序执行所需的资源由应用程序声明。 当应用程序被激活时,只有声明的资源才可用于应用程序,因为只有声明的资源连接到执行环境。 资源的可访问性可以由操作系统控制,通过将执行软件使用的本地名称映射到全局资源,使资源可见或不可见,从而可能限制所允许的访问类型。 由于执行软件依赖于操作系统对资源进行访问的映射功能,操作系统仅映射软件声明的名称,因此操作系统可以隔离软件,防止应用程序访问未声明的全局资源。