US 12,450,327 B2
Capability-restricted system control
Boyd Multerer, Wellington (NZ); Kent McLeod, Sydney (AU); Matthew Brecknell, Kingsford (AU); and Ihor Kuz, Waterloo (AU)
Assigned to KRY10 Corp, Karaka Bays (NZ)
Filed by KRY10 Ltd., Wellington (NZ)
Filed on Jul. 25, 2022, as Appl. No. 17/814,758.
Prior Publication US 2024/0028691 A1, Jan. 25, 2024
Int. Cl. G06F 12/16 (2006.01); G06F 12/14 (2006.01); G06F 21/44 (2013.01); G06F 21/64 (2013.01)
CPC G06F 21/44 (2013.01) [G06F 12/1441 (2013.01); G06F 21/64 (2013.01); G06F 2221/2143 (2013.01)] 15 Claims
OG exemplary drawing
 
1. A method, comprising:
instantiating, in one or more systems, a client, a message server, and a server by an application manager, the client having a first contiguous block of untyped memory as a client node, the client node having access to untyped capabilities;
generating, by the client, a message for a server, the message comprising a request to the server and a token;
copying the message from the client node to a first shared node, the first shared node shared between the message server and the client and assigning a use of a set of capabilities from the client node to the message server, wherein the client retains ownership of the set of capabilities and the message server is given a use of the set of capabilities;
communicating with the message server that the message is in the first shared node and that the use of the set of capabilities is given to the message server;
verifying that the client has an authority to communicate with the server by verifying the token in a token table; and
upon verifying that the client has the authority to communicate with the server:
copying the message into a second shared node, the second shared node shared between the message server and the server;
assigning the use of the set of capabilities to the server to allow the server to perform a function in response to the message; and
communicating with the server that the message is in the second shared node for the server.