Tamper-resistant method for authorizing access to data between a host and a predetermined number of attached workstations

Claim 3

The method according to claim 1, wherein the access authorization is of the form of invocation of the application software, and the refusal of the access request is of the form of a message sent to the requesting workstation or user.

Claim 4

The method according to claim 1, wherein the arrangement of the CPU host communicatively attaching the workstations or users is selected from the set consisting of a local area network and a multiprogramming, multiprocessing system exemplified by VM.

Claim 5

The method according to claim 1, wherein the method steps further include modifying the search depth N only by reencrypting same.

Claim 6

The method according to claim 1, wherein the list and the access control software embodying the method are embedded within an object-coded version of the application.

Claim 7

A tamper resistant method for authorizing access to data between a host and a predetermined number N < M attached work stations or users, said host including a communications server for managing physical data transmission between the host and M work stations or users; and means for storing access control software and related information; said host manifesting indicia of identity, comprising the steps at the host of: (a) responsive to a service request from a work station or user, invoking access control software from said storage means and a pre-computed list, said list includes M station or user identities and an encrypted representation of N indicative of the number of work stations or users authorized access or attachment to said host, said encrypted representation N being formed using an encryption key as a function of the host identity and an offset; (b) ascertaining the depth N to which the list may be searched by decrypting the representation using the key; and (c) comparing identity of the work station or user originating the service request with the identities of the M stations or users on the list but only to a depth N, and, returning an authorization only upon a match condition.

Claim 8

A tamper resistant method for authorizing access to data between a host and a predetermined number N < M attached work stations or users, said host including a communications server for managing physical data transmission between the host and M work stations or users; and means for storing access control software and related information; said host manifesting indicia of identity, comprising the steps at the host of: (a) responsive to a service request from a work station or user, invoking access control software from said storage means and a pre-computed list, said list includes M station or user identities and an encrypted representation of N indicative of the number of work stations or users authorized access or attachment to said host, said encrypted representation N being formed using an encryption key as a function of the host identity and an offset; (b) ascertaining the depth N to which the list may be searched by decrypting the representation using the key; and (c) comparing identity of the work station or user originating the service request with the identities of the M stations or users on the list but only to a depth N, and, returning an authorization only upon a match condition.

Claim 9

The method according to claim 6, wherein the method steps further include modifying the search depth N only by reencrypting same.