US4885789A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Remote trusted path mechanism for telnet
Assignee: International Business Machines Corp
•
Filing: 1988-02-01
•
Granted: 1989-12-05
•
Expires: 2008-02-01
Abstract
Abstract In the remote trusted path invention, secure systems may provide a mechanism for the user to establish a trusted path for direct communication with the system's trusted computing base for security-critical operations. This invention allows users to request such a trusted path from remote systems using a new TELNET option and command, in a system-independent, confirmed, backward-compatible manner. It also describes how to implement remote support for such a trusted path in systems which use a Secure Attention Key mechanism such as Secure AIX.
Inventors
- 👤 Wilhelm F. Burger
- 👤 Mark E. Carson
- 👤 Abhai Johri
- 👤 Ellen J. Stokes
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-24 15:37
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/60; G06F21/62; G06F21/6218; G06F2211/00; G06F2211/009
Claims Analysis
Total Claims: 4
Claim 1
Independent Claim
161 words
A method in a computer operating system for creating, in response to a network secure attention request, a trusted path between a communications network connected to a data processor running a trusted control process under said operating system and a trusted user program portion of a trusted computing base in said data processor, comprising the steps of: waiting for the receipt of a network Secure Attention Key message from said communications network; outputting in response to the receipt of said network Secure Attention Key message, a Secure Attention Key signal; terminating active processes under a trusted parent control process in response to said production of said Secure Attention Key signal; limiting the access of processes in said data processor to said communications network to only said control process; establishing a trusted user program process under said control process, having exclusive access to said communications network; whereby a trusted path is established between said communications network and said trusted user program process.
Claim 2
Independent Claim
161 words
A method in a computer operating system for creating, in response to a network secure attention request, a trusted path between a communications network connected to a data processor running a trusted control process under said operating system and a trusted user program portion of a trusted computing base in said data processor, comprising the steps of: waiting for the receipt of a network Secure Attention Key message from said communications network; outputting in response to the receipt of said network Secure Attention Key message, a Secure Attention Key signal; terminating active processes under a trusted parent control process in response to said production of said Secure Attention Key signal; limiting the access of processes in said data processor to said communications network to only said control process; establishing a trusted user program process under said control process, having exclusive access to said communications network; whereby a trusted path is established between said communications network and said trusted user program process.
Claim 3
Dependent Claim
280 words
In a data processing network including a first node having a first data processor connected over a data communications network to a second node having a second data processor, said first data processor having connected thereto a terminal which includes a local Secure Attention Key means and a network Secure Attention Key means, a method for establishing a trusted path from said terminal through said first data processor and over said network to a trusted process in said second data processor comprising the steps of: establishing a first trusted process in said first data processor in response to a first Secure Attention Key signal from said local Secure Attention Key means, said first trusted process having a trusted path to said terminal; establishing a communications link between said terminal and said data processing network with said first trusted process, and outputting a network Secure Attention Key message over said network to said second data processor in response to a signal from said network Secure Attention Key means; receiving said network Secure Attention Key message in said second data processor and in response thereto, outputting a second Secure Attention Key signal; terminating active processes under a parent control process in said second data processor in response to said second Secure Attention Key signal; limiting the access of processes in said second data processor to said communications network to only said control process; establishing a second trusted process in said second data processor under said control process, having exclusive access to said communications network; whereby a trusted path is established from said terminal through said first processor and over said communications network and through said second processor to said second trusted process.
Claim 4
Dependent Claim
280 words
In a data processing network including a first node having a first data processor connected over a data communications network to a second node having a second data processor, said first data processor having connected thereto a terminal which includes a local Secure Attention Key means and a network Secure Attention Key means, a method for establishing a trusted path from said terminal through said first data processor and over said network to a trusted process in said second data processor comprising the steps of: establishing a first trusted process in said first data processor in response to a first Secure Attention Key signal from said local Secure Attention Key means, said first trusted process having a trusted path to said terminal; establishing a communications link between said terminal and said data processing network with said first trusted process, and outputting a network Secure Attention Key message over said network to said second data processor in response to a signal from said network Secure Attention Key means; receiving said network Secure Attention Key message in said second data processor and in response thereto, outputting a second Secure Attention Key signal; terminating active processes under a parent control process in said second data processor in response to said second Secure Attention Key signal; limiting the access of processes in said second data processor to said communications network to only said control process; establishing a second trusted process in said second data processor under said control process, having exclusive access to said communications network; whereby a trusted path is established from said terminal through said first processor and over said communications network and through said second processor to said second trusted process.
References Cited (Backward Citations)
US4701840A
Cited
US4799153A
Cited
US4677670A
Cited
US4799061A
Cited
US4771461A
Cited
US4748668A
Cited
US4794664A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1992-12-04 | 1993-06-05 | 1993-12-05 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 1996-12-04 | 1997-06-05 | 1997-12-05 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2000-12-04 | 2001-06-05 | 2001-12-05 | $7700.00 | Window Closed / Lapsed |