Dell products l.p. (20240126620). AUTOMATIC ACCESS CONTROL OF CALLS MADE OVER NAMED PIPES WITH OPTIONAL CALLING CONTEXT IMPERSONATION simplified abstract

AUTOMATIC ACCESS CONTROL OF CALLS MADE OVER NAMED PIPES WITH OPTIONAL CALLING CONTEXT IMPERSONATION

Organization Name

dell products l.p.

Inventor(s)

Daniel Thomas Daugherty of Plano TX (US)

Ricardo Antonio Ruiz of The Colony TX (US)

AUTOMATIC ACCESS CONTROL OF CALLS MADE OVER NAMED PIPES WITH OPTIONAL CALLING CONTEXT IMPERSONATION - A simplified explanation of the abstract

This abstract first appeared for US patent application 20240126620 titled 'AUTOMATIC ACCESS CONTROL OF CALLS MADE OVER NAMED PIPES WITH OPTIONAL CALLING CONTEXT IMPERSONATION

Simplified Explanation

Systems and methods for automatically filtering privileged methods from unprivileged methods are disclosed in this patent application. This filtering process prevents privileged methods from being accessed by unelevated consumer applications on an information handling system. The filtering is achieved by identifying unprivileged methods within an original implementation class of an elevated publisher software application that are eligible to be shared with an unelevated consumer software application via a named pipe. A dynamic publisher object is implemented on the elevated publisher software application, along with an intermediary dynamic consumer proxy class on the unelevated consumer software application, to restrict access to any other methods (e.g., privileged methods) within the original implementation class that are not eligible to be exposed to the unelevated consumer software application.

• The patent application describes a system and method for filtering privileged methods from unprivileged methods to prevent unauthorized access by unelevated consumer applications.
• This filtering process involves identifying eligible unprivileged methods within an original implementation class of an elevated publisher software application.
• A dynamic publisher object and an intermediary dynamic consumer proxy class are implemented to control access to privileged methods within the original implementation class.

Potential Applications

This technology could be applied in secure software systems where certain methods need to be restricted from unauthorized access.

Problems Solved

This technology solves the problem of preventing unelevated consumer applications from accessing privileged methods in an elevated publisher software application.

Benefits

The benefits of this technology include enhanced security and control over method access within software applications.

Potential Commercial Applications

One potential commercial application of this technology could be in the development of secure communication systems where sensitive methods need to be protected from unauthorized access.

Possible Prior Art

One possible prior art for this technology could be access control mechanisms in software systems that restrict certain functions based on user privileges.

How does this technology impact system performance?

The patent application does not provide information on the potential impact of this technology on system performance. It would be important to understand if the filtering process adds any overhead to the system.

Are there any compatibility issues with existing software systems?

The patent application does not address any potential compatibility issues with existing software systems. It would be crucial to know if this technology can be seamlessly integrated with different software environments without causing disruptions.

Original Abstract Submitted

systems and methods are provided for automatically filtering privileged methods from unprivileged methods, and thus preventing privileged methods from being available to an unelevated consumer application executing on an information handling system. filtering privileged methods from unprivileged methods may be performed, for example, by identifying any unprivileged method/s within an original implementation class of an elevated publisher software application that are eligible to be exposed to (e.g., shared with) an unelevated consumer software application via a named pipe, and implementing a corresponding dynamic publisher object on the elevated publisher software application and an intermediary dynamic consumer proxy class on the unelevated consumer software application to prevent the unelevated consumer software application from calling any other methods (e.g., privileged method/s) within the original implementation class of the elevated publisher software application that are not so identified as being eligible to be exposed to the unelevated consumer software application.