EP0407060A2
Expired / Lapsed
EP
⏱️ 0.0 years remaining
Method of providing mandatory secrecy and integrity file security in a computer system
Assignee: Micro Focus Software Inc
•
Filing: 1990-06-20
•
Granted: —
•
Expires: 2010-06-20
Abstract
Abstract A method of mandatorily enforcing security protections to insure access to files of a computer system only to computer processes properly authorized for access. A separate security label is associated with each file and process of the system and defines authorized security classes pertaining to the associated file or process. Each security label contains information describing authorizations based on data secrecy and data integrity. A comparison is made on an attempted access of a file by a process of the security label associated with the process and the security label associated with the file. A verification is made based on the comparison that the process is authorized to access the file. The verification as to both secrecy and integrity aspects is accomplished in the single verification step.
Inventors
- 👤 Larry A. Wehr
Bibliographic Details
Application Number
—
Jurisdiction
EP
Data Source
google_patents
Last Synchronized
2026-10-28 03:01
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/60; G06F21/62; G06F21/6218; G06F2221/00; G06F2221/21; G06F2221/2145; G06F2221/2149
Claims Analysis
Total Claims: 4
Claim 1
Independent Claim
149 words
A method of mandatorily enforcing security protection to insure access to files of a computer system only to computer processes properly authorized for access, in which a separate security label is associated with each file and process of the system and defines authorized security classes pertaining to the associated file or process, the method comprising the steps of comparing on an attempted access of a file by a process the security label associated with the process and the security label associated with the file, and verifying based on the comparsion that the process is authorized to access the file, said method being characterized in that each security label contains information describing authorizations based on data secrecy and data integrity and that authorization based both on the authorized secrecy and integrity classes of the process and that required by the file for access is accomplished in the single verification step.
Claim 2
Independent Claim
149 words
A method of mandatorily enforcing security protection to insure access to files of a computer system only to computer processes properly authorized for access, in which a separate security label is associated with each file and process of the system and defines authorized security classes pertaining to the associated file or process, the method comprising the steps of comparing on an attempted access of a file by a process the security label associated with the process and the security label associated with the file, and verifying based on the comparsion that the process is authorized to access the file, said method being characterized in that each security label contains information describing authorizations based on data secrecy and data integrity and that authorization based both on the authorized secrecy and integrity classes of the process and that required by the file for access is accomplished in the single verification step.
Claim 3
Dependent Claim
112 words
The method of claim 1 wherein the step of verifying is further characterized by a) verifying on an attempted read access that the security label associated with the process dominates the security label associated with the file, or b) verifying on an attempted write access that the security label associated with the file dominates the security label associated with the process, wherein the authorization information in a security label based on integrity is stored as the inverse of the actual integrity information and a first security label dominates a second security label when at least all secrecy and integrity authorizations in the second security label are also in the first security label.
Claim 4
Dependent Claim
112 words
The method of claim 1 wherein the step of verifying is further characterized by a) verifying on an attempted read access that the security label associated with the file dominates the security label associated with the process, or b) verifying on an attempted write access that the security label associated with the process dominates the security label associated with the file, wherein the authorization information in a security label based on secrecy is stored as the inverse of the actual secrecy information and a first security label dominates a second security label when at least all secrecy and integrity authorizations in the second security label are also in the first security label.
References Cited (Backward Citations)
No citation records indexed.
USPTO Annuity & Maintenance Windows
Maintenance schedule is calculated for granted US utility patents.