A method, apparatus, and computer instructions for process-based access controls on computer resources to processes. An access mechanism is provided in which a specific invoker obtains an object access identity (ACI). Another mechanism is provided in which a specific object, such as a file system resource,...http://www.google.co.uk/patents/US7392383?utm_source=gb-gplus-sharePatent US7392383 - Method and apparatus for providing process-based access controls on computer resources
