US 12,450,106 B2
Automatic access control of calls made over named pipes with optional calling context impersonation
Daniel Thomas Daugherty, Plano, TX (US); and Ricardo Antonio Ruiz, The Colony, TX (US)
Assigned to Dell Products L.P., Round Rock, TX (US)
Filed by DELL PRODUCTS L.P., Round Rock, TX (US)
Filed on Oct. 13, 2022, as Appl. No. 17/965,541.
Prior Publication US 2024/0126620 A1, Apr. 18, 2024
Int. Cl. G06F 9/54 (2006.01)
CPC G06F 9/541 (2013.01) 20 Claims
OG exemplary drawing
 
1. A method, comprising using at least one programmable integrated circuit to:
execute an elevated publisher application and a consumer application, the elevated publish application communicating with the consumer application via an inter-process communication (IPC) connection with the consumer application;
execute the elevated publisher application to load an original implementation class of the elevated publisher application, one or more methods of the elevated publisher application being marked by the original implementation class to be unprivileged methods that are eligible for exposure to an unelevated consumer application;
execute the consumer application to attempt a call across the IPC connection for at least a given one of the methods of the elevated publisher application; and
then respond to the attempted call by the consumer application for the at least one given method of the elevated publisher application by either:
invoking the at least one given method on the elevated publisher application if the consumer application is an elevated consumer application, or
invoking the at least one given method on the elevated publisher application if the consumer application is an unelevated consumer application only if the at least one given method on the elevated publisher application is one of the unprivileged methods included in the dynamic proxy class that is determined to be marked as eligible for exposure to the unelevated consumer application.