|Publication number||US7730522 B2|
|Application number||US 11/130,301|
|Publication date||Jun 1, 2010|
|Filing date||May 16, 2005|
|Priority date||May 16, 2005|
|Also published as||US20060259488|
|Publication number||11130301, 130301, US 7730522 B2, US 7730522B2, US-B2-7730522, US7730522 B2, US7730522B2|
|Inventors||Jose M. Bernabeu-Aubon, Jeff L. Havens|
|Original Assignee||Microsoft Corporation|
|Export Citation||BiBTeX, EndNote, RefMan|
|Patent Citations (33), Non-Patent Citations (18), Referenced by (4), Classifications (14), Legal Events (4)|
|External Links: USPTO, USPTO Assignment, Espacenet|
This application is related in subject matter to U.S. patent application Ser. No. 11/130,308 entitled “Coordinating Reference Counting Between Entities Executing Within Separate Address Spaces” filed herewith, U.S. patent application Ser. No. 11/129,848 entitled “A Cancellation Mechanism for Cooperative Systems” filed herewith, U.S. patent application Ser. No. 11/130,293 entitled “Type Server Caching the Proxy/Stub Generation” filed herewith, U.S. patent application Ser. No. 11/129,847 entitled “Structuring an Operating System Using a Service Architecture” filed herewith and U.S. patent application Ser. No. 11/130,300 entitled “Coordination of Set Enumeration Information Between Independent Agents” filed herewith.
The invention relates to communications between processes in computers and in particular to a mechanism for self-registering objects.
A standard way to communicate between two processes A and B (running on the same machine or running on different machines) is to send a message. Often, for example, it is desirable to enable process A to send a message to process B asking process B to execute code on behalf of process A. Typically, process A must have knowledge of a port or contact point for process B in order to do this.
One way to enable process A to call process B is via a remote procedure call (RPC). A remote procedure call enables a process on one computer to cause code to be executed in another process on the same or on a different computer, without requiring explicit code to be written by a developer or programmer to perform that particular call. An RPC is initiated by the caller process (client) sending a request message to a remote system or second process (server) to execute a certain procedure using supplied arguments. A result message is returned to the caller. For example, in a remote procedure call, a function call may be made by process A, in which the name of the procedure that process B is to execute on behalf of process A and a set of parameters for the procedure, are specified. Process B executes the code and returns a message to process A. When the code in question is written using principles of object-oriented programming, RPC is sometimes referred to as remote invocation or remote method invocation.
A remote procedure call typically follows a particular protocol (another way of saying this is “it uses a particular interface”) so that potentially unrelated processes can communicate. The protocol or interface define the methods and the values which the processes agree upon in order to cooperate.
The procedure of transforming the function call into a message is called marshalling. Marshalling may include gathering data from one or more applications or non-contiguous sources in computer storage, putting the data pieces into a message buffer, and organizing or converting the data into a format that is prescribed for a particular receiver or programming interface. Marshalling typically converts what the code in process A sees as a function call into a message to be sent to process B. The message typically includes the name of the function and a set of parameters, coded in a way that process B understands. Process B receives the message and has to transform the message into a call to process B's internal function. The process of converting a message into a function call is called unmarshalling. The piece of code that performs marshalling in process A is called a proxy and typically resides in the client process. The corresponding piece of code on the server side that performs unmarshalling is called a stub.
Within the context of object oriented programming, process A and process B can be viewed as objects encapsulating data and functions. Some well-known technologies that take this approach are Sun Microsystem's JAVA and Microsoft's COM and DCOM. That is, process B may be viewed as a container for one or multiple objects, whose methods are the functions invoked by process A. In object oriented systems, therefore, process A invokes a method of a particular object of process B instead of invoking a function in process B. To do this, process A must have some way of identifying the object in process B that process A wishes to invoke.
The data stored in process A which enables process A to identify the object of process B is known as a reference to the object. The reference stores information concerning how to locate the object: that is, the reference must be sufficient to identify the process and within the process to identify the object whose method is to be invoked.
One problem with such an approach is the possibility that a reference to an object will be fabricated or forged: that is, the system should guarantee that only the process intended to receive a reference receives the reference and that a reference cannot be deduced and used by a process that is not supposed to have the reference. It would be helpful if such a mechanism were available. Ideally, the mechanism should be performant and easy for a developer to program.
A trusted entity mediates all resource access and resource reference communications between processes, agents or services. An inter-process communication comprises the invocation of a method on an object via one of its references: the invocation can carry object references within its parameters, thus making it possible to propagate object references between processes, agents or services by the use of the IPC mechanism itself. The trusted entity maintains a namespace for each process/agent/service in which every external and internal resource reference of the process/agent/service is uniquely identified by a reference name. Because the trusted entity has sole access to the namespace, it is impossible for references to be forged. For each reference a first process/agent/service sends to a second process/agent/service, the trusted entity determines the resource owner. If the resource is not owned by the first process, the trusted entity translates the local reference name used by the first process to refer to the resource to the reference name used by the resource owner. The trusted entity generates a new local reference name for the second process and associates with the new local reference name the reference name used by the resource owner. This information is stored in the namespace for the second process.
If the resource is owned by the first process, the trusted entity determines the reference name used by the first process to refer to the resource and associates that reference name with a new local reference name for the resource for the second process. A process signals its intention to make a resource available to another process by sending a communication to the second process in which a reference to the resource is passed to the second process. Registration of a resource is only required when a process makes a resource available to another process (referred to herein as “exporting a reference”). The trusted entity detects the exportation of a reference by monitoring communications between processes. The trusted entity determines if a reference is being exported by inspection of the reference name itself. Foreign reference names are distinguishable from references to resources owned by a process by use of a naming convention.
The namespace may be maintained by the trusted entity as a table for each process. The table maintained for a process by the trusted entity may be solely accessible to the trusted entity and may be used by the trusted entity to resolve references to objects so that processes cannot directly access objects in other processes. The table for a process may include entries for references passed to the process and for references the process has exported. The table may be indexed by reference name. Alternatively, the index into the table may be used as the reference name. The index into the table for the object reference may identify the object reference as a reference passed to the process or as a reference the process has exported. The index into the table for the object reference may be used as the reference name for that process. If the trusted entity determines that an object reference is to be exported from a first process to a second process, the trusted entity may create an entry for the object reference in the table the trusted entity maintains for the first process. The index may be an even number to identify the reference as one exported by the owner process or may follow some other naming convention that identifies the reference as an exported reference. The index itself may be used as the reference name assigned to the reference by the trusted entity. The trusted entity may generate a new reference name for use by the second process. The trusted entity may create an entry in the table the trusted entity maintains for the second process, in which the reference name is an odd number to identify the object as an object that has been passed to the second process from another process. Alternatively, the trusted entity may generate a new reference name identifying the reference as one passed to the second process from another process by following some other naming convention.
The foregoing summary, as well as the following detailed description of illustrative embodiments, is better understood when read in conjunction with the appended drawings. For the purpose of illustrating the invention, there is shown in the drawings exemplary constructions of the invention; however, the invention is not limited to the specific methods and instrumentalities disclosed. In the drawings:
Inter-process communication (IPC) is the exchange of data between one process and another, either within the same computer or over a network. It implies a protocol that guarantees a response to a request. Examples are Unix sockets, RISC OS's messages, Mach ports, OS/2's named pipes, Microsoft Windows' DDE, Novell's SPX, Apple Macintosh's IAC (particularly AppleEvents) and different forms of software componentry (CORBA, Component Object Model (COM), Distributed Component Object Model (DCOM) and so on). With some systems, it may be possible for one process to fabricate or forge a reference to an object within another process.
For example, suppose that the protocol TCP/IP is used to communicate between process A on computer 1 and process B on computer 2. Suppose that process B listens on port number 1015 for incoming messages. In a direct, unmediated communication between process A and process B, process A merely has to specify the port number and object number within process B to access process B's object. Suppose that process B has a table in which is stored all process B's objects and that the table is indexed by the position that the object holds in the table. Thus, position one in the table may point to object 1, position 2 may point to object 2 and so on. In order to locate one of process B's objects, process A only needs process B's port number and the position of the object in the table. Hence, a reference to any object in process B could be easily fabricated by process A, as long as process A knows what port number process B is listening for incoming invocations. The fabrication of references just described is difficult or impossible to prevent.
To avoid these and other problems associated with communications between processes, a trusted entity having a trusted channel to every other process is often employed to mediate communications between processes. Using this approach, a process that exports one of its resources has to register its reference with the trusted entity. For example, a trusted entity may create a table for each of the processes in which in each one of the positions of the table, the trusted entity stores contact information for the objects of the process. Thus, in order for process A to contact process B, process A may send a message to the trusted entity, requesting access to an object in process B via a reference which is an index into the table maintained by the trusted entity for process B. The table maintained by the trusted entity for process B would need to store enough information to access the object in process B.
Typically, the way the trusted entity gets the information it requires to access the object in process B is by registration. For example, if process B wants to make one of its objects, say object 1, available for use by another process, process B may directly invoke the trusted entity, and request the trusted entity to register object 1. Process B may pass the trusted entity the address of object 1. The trusted entity stores this information in a table that it maintains for process B and passes process B an index into the table where the trusted entity stores the information required to access object 1. When process B wants to make object 1 accessible to process A, process B passes the index of object 1 to process A. Process A passes this index to the trusted entity to access object 1.
Registration of objects is a costly operation, both in terms of system resources and programmer burden. In accordance with some embodiments of the invention, registration of objects is eliminated, as described more fully below.
Exemplary Computing Environment
Although not required, the invention can be implemented via an application programming interface (API), for use by a developer, and/or included within the network browsing software which will be described in the general context of computer-executable instructions, such as program modules, being executed by one or more computers, such as client workstations, servers, or other devices. Generally, program modules include routines, programs, objects, components, data structures and the like that perform particular tasks or implement particular abstract data types. Typically, the functionality of the program modules may be combined or distributed as desired in various embodiments. Moreover, those skilled in the art will appreciate that the invention may be practiced with other computer system configurations. Other well known computing systems, environments, and/or configurations that may be suitable for use with the invention include, but are not limited to, personal computers (PCs), automated teller machines, server computers, hand-held or laptop devices, multi-processor systems, microprocessor-based systems, programmable consumer electronics, network PCs, minicomputers, mainframe computers, and the like. The invention may also be practiced in distributed computing environments where tasks are performed by remote processing devices that are linked through a communications network or other data transmission medium. In a distributed computing environment, program modules may be located in both local and remote computer storage media including memory storage devices.
With reference to
Computer 110 typically includes a variety of computer readable media. Computer readable media can be any available media that can be accessed by computer 110 and includes both volatile and nonvolatile media, removable and non-removable media. By way of example, and not limitation, computer readable media may comprise computer storage media and communication media. Computer storage media includes both volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information such as computer readable instructions, data structures, program modules or other data. Computer storage media includes, but is not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CDROM, digital versatile disks (DVD) or other optical disk storage, magnetic cassettes, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other medium which can be used to store the desired information and which can be accessed by computer 110. Communication media typically embodies computer readable instructions, data structures, program modules or other data in a modulated data signal such as a carrier wave or other transport mechanism and includes any information delivery media. The term “modulated data signal” means a signal that has one or more of its characteristics set or changed in such a manner as to encode information in the signal. By way of example, and not limitation, communication media includes wired media such as a wired network or direct-wired connection, and wireless media such as acoustic, RF, infrared, and other wireless media. Combinations of any of the above should also be included within the scope of computer readable media.
The system memory 130 includes computer storage media in the form of volatile and/or nonvolatile memory such as read only memory (ROM) 131 and random access memory (RAM) 132. A basic input/output system 133 (BIOS), containing the basic routines that help to transfer information between elements within computer 110, such as during start-up, is typically stored in ROM 131. RAM 132 typically contains data and/or program modules that are immediately accessible to and/or presently being operated on by processing unit 120. By way of example, and not limitation,
The computer 110 may also include other removable/non-removable, volatile/nonvolatile computer storage media. By way of example only,
The drives and their associated computer storage media discussed above and illustrated in
A monitor 191 or other type of display device is also connected to the system bus 121 via an interface, such as a video interface 190. A graphics interface 182, such as Northbridge, may also be connected to the system bus 121. Northbridge is a chipset that communicates with the CPU, or host processing unit 120, and assumes responsibility for accelerated graphics port (AGP) communications. One or more graphics processing units (GPUs) 184 may communicate with graphics interface 182. In this regard, GPUs 184 generally include on-chip memory storage, such as register storage and GPUs 184 communicate with a video memory 186. GPUs 184, however, are but one example of a coprocessor and thus a variety of coprocessing devices may be included in computer 110. A monitor 191 or other type of display device is also connected to the system bus 121 via an interface, such as a video interface 190, which may in turn communicate with video memory 186. In addition to monitor 191, computers may also include other peripheral output devices such as speakers 197 and printer 196, which may be connected through an output peripheral interface 195.
The computer 110 may operate in a networked environment using logical connections to one or more remote computers, such as a remote computer 180. The remote computer 180 may be a personal computer, a server, a router, a network PC, a peer device or other common network node, and typically includes many or all of the elements described above relative to the computer 110, although only a memory storage device 181 has been illustrated in
When used in a LAN networking environment, the computer 110 is connected to the LAN 171 through a network interface or adapter 170. When used in a WAN networking environment, the computer 110 typically includes a modem 172 or other means for establishing communications over the WAN 173, such as the Internet. The modem 172, which may be internal or external, may be connected to the system bus 121 via the user input interface 160, or other appropriate mechanism. In a networked environment, program modules depicted relative to the computer 110, or portions thereof, may be stored in the remote memory storage device. By way of example, and not limitation,
One of ordinary skill in the art can appreciate that a computer 110 or other client device can be deployed as part of a computer network. In this regard, the present invention pertains to any computer system having any number of memory or storage units, and any number of applications and processes occurring across any number of storage units or volumes. The present invention may apply to an environment with server computers and client computers deployed in a network environment, having remote or local storage. The present invention may also apply to a standalone computing device, having programming language functionality, interpretation and execution capabilities.
Self-Registration of Objects
In some embodiments of the invention, the operating system includes entities that are processes, agents, services, components or modules comprising containers for objects or resources that are described through interfaces.
A trusted entity may be viewed as a unique distinctive process, module, component, agent or service that mediates communications between processes in the system. In some embodiments the trusted entity is able to distinguish between data parameters and reference parameters in messages passed between processes. In some embodiments the trusted entity has a trusted channel to every agent, service, module, component or process for mediating resource access and reference. Communications with the trusted entity therefore are secure, meaning that processes other than the trusted entity are unable to access or modify transmissions or messages sent between processes. Moreover, the trusted entity may be capable of identifying the originator of a message.
In some embodiments of the invention, the trusted entity is the kernel 206. The kernel 206 can implement and expose its objects (not shown) to other services, such as to services 202 and 212 in
A service may communicate with another service by sending a method invocation to another object via an object reference (e.g., via a remote call). All communications among services are assumed to be and are treated as though they are remote. The client and server services may be in separate (remote) containers or may be co-located in the same container but in either case, the semantics of the call is remote.
A service interface may be specified in an interface definition language or via a contract. In some embodiments of the invention, a subset of an existing language, such as but not limited to C#, is used to define the contract. In some embodiments of the invention, a subset of the application implementation language, such as but not limited to C#, is used to define the interfaces. A service written in C# therefore will seamlessly integrate with the C# contract without requiring the mapping necessitated in traditional systems which use an IDL language for contracts. Services written in other languages such as for example, unmanaged C++ may have a translation table which maps constructs from the C# interface to constructs in C++. Resultant C++ services can interoperate with the C# service as long as the system service model and interface definitions are not violated.
Services may be mapped in a one to one relation to an address space. If such is the case, protection ensues as a consequence of the address space provided by the memory management unit. Alternatively, in some embodiments, multiple services can be located within the same address space. In this case, protection is obtained by a managed code run-time (such as, for example, Microsoft's CLR or Common Language Runtime). Services communicate with each other independent of their location.
Failure and security boundaries in the system may exist at the service level and may be reinforced by hardware protection at the address space and machine levels. Service recovery actions including the ability to restart, and dependency tracking are provided by the operating system. Optimizations may accrue for services that are located within the same address space.
A method invocation can only be interpreted by the receiving object. The receiving object decides what action or actions are to be taken, based on the information passed with the invocation. The information passed may include specific data structures and/or references the invoker passes to the object being invoked.
The set of invocations an object accepts through a particular reference and the way the object is supposed to react to such an invocation is referred to as the interface supported by the object through that reference. Hence, the kernel will not necessarily know what the particular interface implemented by a referenced object is and does not need access to that information. It will be appreciated that it is possible to have different references designating the same object implementation through different interfaces.
An object in some embodiments is an implementation of an interface within some service and is an independent unit of failure. An object may be expressed and coded in any programming language capable of passing parameters and control.
An object reference in some embodiments identifies the object to which the reference refers and is not able to be forged. A reference confers to the holder the authority to invoke any of the methods of the interface for which the reference to the object was created. An object reference may be revoked and may be passed (optionally with restrictions) to another service or to other services as an argument of an invocation or as return results.
Use of an interface so defined enables the definition of a class implementing the interface and whose method implementations are stubs which perform the task of parameter marshalling. Instances of such a class are herein referred to as proxies, the proxies sitting in for the actual objects to which they refer and having the same interface.
In accordance with some embodiments of the invention, when a service, agent or process (e.g., a first process) wants to make an object available to another process (e.g., a second service, agent or process), instead of invoking a trusted entity to register the object reference for export from the first process, the trusted entity recognizes that a new object reference is being exported by the first process by monitoring communications between processes and inspecting the reference name. The trusted entity automatically creates an entry for the object reference in a table maintained for the first process when a reference to the object is exported. In some embodiments, the trusted entity recognizes that the object reference is a reference which has been exported by the first process because of the naming convention used to name the object reference. In some embodiments of the invention, object references owned by the passing process are identified by naming the reference an even number (e.g., giving the object reference a name which is an even number, such as naming the object reference “2”).
A reference that is passed to a process (that is, is passed to the second process by the first process but is not owned by the first process) may also be referred to as “foreign” reference. An object reference being passed to the second process by the first process (foreign to both the first and the second process) is identified by naming the object reference an odd number. It will be appreciated that there are numerous other naming conventions that would enable the trusted entity to distinguish exported references from foreign or passed references. For example, foreign references may be named with a standard prefix which identifies the reference as a foreign reference. A name that contains or begins with or ends with a particular character or series of characters such as “0”, “1”, “FOR”, etc. may identify the reference as foreign, while a name that contains or begins with or ends with a particular character or series of characters such as “1”, “0”, “EXP”, etc. may identify the reference as exported (owned by the process sending the message).
Upon recognizing the reference to be a new exported reference, the trusted entity may create an entry in a table for the exporting process (the first process) for the reference. The trusted entity may also create an entry in a table for the process to which the reference is being exported, wherein the index to the table entry identifies the reference as one foreign to the second process and may pass this index to the table entry to the second process.
Thus, in an exemplary IPC system according to some embodiments of the invention, when a first process (process B), wants to export an object reference (i.e., make the referenced object owned by the first process available to a second process (process A)), the first process identifies the object reference as exported. In some embodiments of the invention, the reference is identified as exported by assigning the reference a name which is an unused even integer. A trusted entity that mediates or monitors communications between processes recognizes that the reference in the communication is exported, because the reference name is an even integer. If the reference is a new reference, the trusted entity creates an entry in a table maintained for process B. If a reference to the object is to be exported or passed to the second process (process A), the trusted entity generates a new name or index for the object reference in a second table maintained for process A. The name or index the trusted entity generates in some embodiments of the invention identifies the object reference as one which is passed to process A but is not owned by process A, by making the name or index into the table maintained for process A an odd integer. The trusted entity may then provide process A with an object reference which is the odd integer that is the index of the entry in process A's table corresponding to the reference.
At 304 the trusted entity may determine whether the reference is a reference to an object or resource owned by the first process or if the reference is a reference to an object or resource owned by another process. If the communication includes a reference to an object that is owned by the first process which is being exported by the first process to the second process, the trusted entity may determine if the reference has previously been exported (306). If the object reference has not previously been exported, an entry may be created in the table for the first process (308). At 310 a new table entry may be created in the table for the second process. The object reference may be identified as a reference that is foreign to the second process (not owned by the second process) (312) by assigning the reference a new name. The new name (a local name for the reference for the second process) may be associated in the second process' table with the name of the reference used internally in the first process. At 313 the communication may be modified to include the new local name before the communication is sent on to the second process A.
If the object reference has been previously exported to any process, a table entry for the first process will already exist and therefore only the table entry for the second process will be generated, as described above (310).
If at 304 the object reference in the communication is identified as foreign to the first process (not owned by the first process), the trusted entity resolves the foreign reference in the first process' table to the internal name of the reference used by the process that owns the object at 314. Resolution of references may be implemented by consulting table entries as described more fully below with respect to the examples. Processing continues at 310 at which the trusted entity may create a new local name for the second process and may associate with it the internal name of the reference used by the process that owns the object at 312 and may generate a table entry for the second process as described above.
A system for self-registering objects may include one or more processes, entities, agents or services including one or more objects or resources that may be shared with one or more other processes, agents or services. The system may also include one or more tables for storing information about shared objects or resources, and/or an independent entity, process, service or agent that mediates communications between processes, entities, agents or services.
Still referring to
Process A 402 and process B 404 may include one or more objects (representing resources that may be able to be shared with other processes). In
A process such as but not limited to process A 402 may identify a reference to an object it owns that it is exporting to another process by labeling, naming, referring to or otherwise identifying the object reference in such a way that an exported object reference is distinguishable from a reference to an object that process A 402 does not own that it is passing to another process. For example, for process B to export object 1 420 to process A, process B may assign an unused even number to object 1 420 to be used as the object reference in the IPC communication. Similarly, for process A 402 to export object x 426 to process B 404, process A 402 may assign an unused even number to object x 426 to be used as the object reference in the IPC communication.
The trusted entity 406 mediates communications between processes and may maintain a table of exported object references for each process. The table may also include references passed to the process from another process. The communication received by the trusted entity 406 may include an object reference. The trusted entity 406 may determine if the reference in the communication is to be exported or passed. If the trusted entity 406 determines that the object reference in the communication is to be exported, the trusted entity 406 may then determine if the object reference has previously been exported, by searching for that object reference in the originating (exporting) process's table. If the object has not been previously exported, no entry for the object will be found, and the trusted entity will create an entry for the object reference. If the object reference has been previously exported, an object reference will already exist in the table for that process. A duplicate entry for the reference will not be created. The trusted entity 406 may then pass a reference to the object exported by the originating process to the receiving process, identifying the reference as an foreign reference (that is, foreign to the receiving process) by assigning an odd number as an object reference. The trusted entity 406 may add an entry to the table for the receiving process for the foreign reference.
In some embodiments of the invention, a table is maintained by the trusted entity 406 for each process (e.g., process A 402 and process B 404 of
For example, referring now to
If, however, this is the first time that a reference to object 1 420 is being exported, no entry for the reference will exist in table B 412. Suppose no index “2” is found. Failure to find an index “2” indicates that this object has not been exported already (i.e., the object reference being exported is “new” (306). In that case, the trusted entity 406 will create a new table entry 1 412 a in table B 412 for the reference 2 460. The table entry may also include one or more of the following: the location of object 1 420 in process B 404 (“0010” 462), the name of the process to which the reference was exported (process A) and a cross-reference to the name used by process A 402 to refer to the reference (“1”).
The various techniques described herein may be implemented in connection with hardware or software or, where appropriate, with a combination of both. Thus, the methods and apparatus of the present invention, or certain aspects or portions thereof, may take the form of program code (i.e., instructions) embodied in tangible media, such as floppy diskettes, CD-ROMs, hard drives, or any other machine-readable storage medium, wherein, when the program code is loaded into and executed by a machine, such as a computer, the machine becomes an apparatus for practicing the invention. In the case of program code execution on programmable computers, the computing device will generally include a processor, a storage medium readable by the processor (including volatile and non-volatile memory and/or storage elements), at least one input device, and at least one output device. One or more programs that may utilize the creation and/or implementation of domain-specific programming models aspects of the present invention, e.g., through the use of a data processing API or the like, are preferably implemented in a high level procedural or object oriented programming language to communicate with a computer system. However, the program(s) can be implemented in assembly or machine language, if desired. In any case, the language may be a compiled or interpreted language, and combined with hardware implementations.
While the present invention has been described in connection with the preferred embodiments of the various figures, it is to be understood that other similar embodiments may be used or modifications and additions may be made to the described embodiments for performing the same function of the present invention without deviating therefrom. Therefore, the present invention should not be limited to any single embodiment, but rather should be construed in breadth and scope in accordance with the appended claims.
|Cited Patent||Filing date||Publication date||Applicant||Title|
|US5446901 *||Jun 30, 1993||Aug 29, 1995||Digital Equipment Corporation||Fault tolerant distributed garbage collection system and method for collecting network objects|
|US5802590 *||Dec 13, 1994||Sep 1, 1998||Microsoft Corporation||Method and system for providing secure access to computer resources|
|US5907675||Mar 22, 1995||May 25, 1999||Sun Microsystems, Inc.||Methods and apparatus for managing deactivation and shutdown of a server|
|US5956509||Aug 18, 1995||Sep 21, 1999||Microsoft Corporation||System and method for performing remote requests with an on-line service network|
|US6119115||Mar 12, 1998||Sep 12, 2000||Microsoft Corporation||Method and computer program product for reducing lock contention in a multiple instruction execution stream processing environment|
|US6138251||Jun 30, 1997||Oct 24, 2000||Sun Microsystems, Inc.||Method and system for reliable remote object reference management|
|US6289390||Nov 12, 1998||Sep 11, 2001||Microsoft Corporation||System and method for performing remote requests with an on-line service network|
|US6338063||May 1, 2000||Jan 8, 2002||Microsoft Corporation||Method and computer program product for reducing lock contention in a multiple instruction execution stream processing environment|
|US6381628||Nov 20, 1998||Apr 30, 2002||Microsoft Corporation||Summarized application profiling and quick network profiling|
|US6381653||Apr 16, 1998||Apr 30, 2002||Alcatel||Managing accidental death of an object during communication between objects distributed in a COM environment|
|US6418464||Sep 25, 1998||Jul 9, 2002||Apple Compunter, Inc.||Method and apparatus for coordination of client/server processes|
|US7043733||Jun 14, 2004||May 9, 2006||Microsoft Corporation||Server application components with control over state duration|
|US7043734||Feb 15, 2005||May 9, 2006||Microsoft Corporation||Component self-deactivation while client holds a returned reference|
|US7062770||Feb 15, 2005||Jun 13, 2006||Microsoft Corporation||Recycling components after self-deactivation|
|US7076784||Oct 22, 1999||Jul 11, 2006||Microsoft Corporation||Software component execution management using context objects for tracking externally-defined intrinsic properties of executing software components within an execution environment|
|US7171672||Apr 24, 2002||Jan 30, 2007||Telefonaktie Bolaget Lm Ericsson (Publ)||Distributed application proxy generator|
|US7233972||May 28, 2002||Jun 19, 2007||Apple Inc.||Method and apparatus for coordination of client/server processes|
|US7237237||Jul 24, 2001||Jun 26, 2007||The Mathworks, Inc.||Designating an object for destruction|
|US7325240||Apr 10, 2003||Jan 29, 2008||Hitachi, Ltd.||Method for generating calling convention transformation process|
|US7379460||Jun 6, 2003||May 27, 2008||Intel Corporation||Packet processing system|
|US7386859||May 28, 2002||Jun 10, 2008||Microsoft Corporation||Method and system for effective management of client and server processes|
|US7434228||May 16, 2005||Oct 7, 2008||Microsoft Corporation||Structuring an operating system using a service architecture|
|US7434235||May 16, 2005||Oct 7, 2008||Microsoft Corporation||Type server caching the proxy/stub generation|
|US7441252||Dec 23, 2004||Oct 21, 2008||Sap Ag||Cache control device, and method and computer program for the same|
|US7581232||May 16, 2005||Aug 25, 2009||Microsoft Corporation||Coordinating reference counting between entities executing within separate address spaces|
|US7607142||May 16, 2005||Oct 20, 2009||Microsoft Corporation||Cancellation mechanism for cooperative systems|
|US20040064721 *||Sep 30, 2002||Apr 1, 2004||Microsoft Corporation||Securing uniform resource identifier namespaces|
|US20040205771||Apr 27, 2004||Oct 14, 2004||Nextset Software Inc.||System and method of generating and using proxy beans|
|US20050091214 *||Sep 10, 2004||Apr 28, 2005||Mircrosoft Corporation||Internal object protection from application programs|
|US20050193392||Jan 13, 2005||Sep 1, 2005||Francesco Carusi||Method and system for instantiating components conforming to the "COM" specification in custom contexts|
|US20060259541||May 16, 2005||Nov 16, 2006||Microsoft Corporation||Coordination of set enumeration information between independent agents|
|WO2006125003A2||May 16, 2006||Nov 23, 2006||Microsoft Corporation||Coordinating reference counting between entities executing within separate address spaces|
|WO2006125004A2||May 16, 2006||Nov 23, 2006||Microsoft Corporation||A cancellation mechanism for cooperative systems|
|1||Bevan, D., "An efficient reference counting solution to the distributed garbage collection problem," Parrallel Computing, 1989, 9, 179-192.|
|2||Mitchell, J.G. et al., "An Overview of the Spring System", Compcon: Digest of Technical Papers, 1994, 39, 122-131.|
|3||PCT International Preliminary Report on Patentability issued Mar. 10, 2009, in corresponding International Application No. PCT/US2006/019090.|
|4||PCT International Preliminary Report on Patentability issued Mar. 10, 2009, in corresponding International Application No. PCT/US2006/019092.|
|5||PCT International Search Report mailed Jul. 3, 2008, in corresponding International Application No. PCT/US2006/019092.|
|6||PCT International Search Report mailed Jun. 20, 2008, in corresponding International Application No. PCT/US2006/019090.|
|7||United States Patent and Trademark Office: Final Office Action dated Jan. 7, 2009, U.S. Appl. No. 11/130,308.|
|8||United States Patent and Trademark Office: Final Office Action dated Mar. 17, 2009, U.S. Appl. No. 11/129,848.|
|9||United States Patent and Trademark Office: Final Office Action dated May 29, 2009, U.S. Appl. No. 11/130,300.|
|10||United States Patent and Trademark Office: Non-Final Office Action dated Aug. 11, 2008, U.S. Appl. No. 11/129,848.|
|11||United States Patent and Trademark Office: Non-Final Office Action dated Dec. 31, 2007, U.S. Appl. No. 11/129,847.|
|12||United States Patent and Trademark Office: Non-Final Office Action dated Dec. 31, 2007, U.S. Appl. No. 11/130,293.|
|13||United States Patent and Trademark Office: Non-Final Office Action dated Jun. 24, 2008, U.S. Appl. No. 11/130,308.|
|14||United States Patent and Trademark Office: Non-Final Office Action dated Sep. 3, 2008, U.S. Appl. No. 11/130,300.|
|15||United States Patent and Trademark Office: Notice of Allowance dated Aug. 1, 2008, U.S. Appl. No. 11/129,847.|
|16||United States Patent and Trademark Office: Notice of Allowance dated Aug. 21, 2009, U.S. Appl. No. 11/129,848.|
|17||United States Patent and Trademark Office: Notice of Allowance dated Jul. 10, 2008, U.S. Appl. No. 11/130,293.|
|18||United States Patent and Trademark Office: Notice of Allowance dated May 29, 2009, U.S. Appl. No. 11/130,308.|
|Citing Patent||Filing date||Publication date||Applicant||Title|
|US8549093||Sep 23, 2009||Oct 1, 2013||Strategic Technology Partners, LLC||Updating a user session in a mach-derived system environment|
|US8769373||Oct 5, 2010||Jul 1, 2014||Cleon L. Rogers, JR.||Method of identifying and protecting the integrity of a set of source data|
|US8924502||Sep 24, 2013||Dec 30, 2014||Strategic Technology Partners Llc||System, method and computer program product for updating a user session in a mach-derived system environment|
|US20150278528 *||Mar 27, 2014||Oct 1, 2015||Intel Corporation||Object oriented marshaling scheme for calls to a secure region|
|U.S. Classification||726/4, 726/30, 709/215, 719/316, 726/2, 719/315, 719/330, 713/164|
|International Classification||G06F15/16, H04L29/06|
|Cooperative Classification||G06F9/548, G06F9/468|
|European Classification||G06F9/54P1, G06F9/46V|
|Aug 5, 2005||AS||Assignment|
Owner name: MICROSOFT CORPORATION, WASHINGTON
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:BERNABEU-AUBAN, JOSE M.;HAVENS, JEFF L.;REEL/FRAME:016361/0150
Effective date: 20050509
Owner name: MICROSOFT CORPORATION,WASHINGTON
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:BERNABEU-AUBAN, JOSE M.;HAVENS, JEFF L.;REEL/FRAME:016361/0150
Effective date: 20050509
|Feb 1, 2011||CC||Certificate of correction|
|Nov 26, 2013||FPAY||Fee payment|
Year of fee payment: 4
|Dec 9, 2014||AS||Assignment|
Owner name: MICROSOFT TECHNOLOGY LICENSING, LLC, WASHINGTON
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:MICROSOFT CORPORATION;REEL/FRAME:034543/0001
Effective date: 20141014