US5220604A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method for performing group exclusion in hierarchical group structures
Assignee: Hewlett Packard Development Co LP
•
Filing: 1990-09-28
•
Granted: 1993-06-15
•
Expires: 2010-09-28
Abstract
Abstract A method for denying a first group access to a system resource wherein a second group is selected such that the first group is a subgroup of the second group. Access is granted only to those members of the second group who do not derive their membership in the second group through their membership in the first group.
Inventors
- 👤 Morrie Gasser
- 👤 Andrew C. Goldstein
- 👤 Charles W. Kaufman
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-26 13:47
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/60; G06F21/62; G06F21/6218; G06F21/6281; H; H04; H04L; H04L9/00; H04L9/32; H04L9/3247; H04L9/3249; H04L9/3263; H04L9/3271; Y; Y10; Y10S; Y10S707/00; Y10S707/99931; Y10S707/99939
Claims Analysis
Total Claims: 5
Claim 1
Independent Claim
145 words
In a distributed computing system having a system resource, (A) in which a plurality of principals are divided into a plurality of groups including a first group which is one subgroup of a second group which includes other subgroups; and (B) in which principals derive their membership in the second group through membership in at least one of the subgroups; a method for denying principal's solely in the first group access to the resource comprising the steps of: (a) receiving a request from a principal for access to the system resource; (b) determining whether the requesting principal is a member of one of the subgroups not the first group; and (c) denying the requesting principal access to the resource if the principal is not a member of one of the other subgroups, whereby principal solely in the first group are denied access to the resource.
Claim 2
Dependent Claim
145 words
In a distributed computing system having a system resource, (A) in which a plurality of principals are divided into a plurality of groups including a first group which is one subgroup of a second group which includes other subgroups; and (B) in which principals derive their membership in the second group through membership in at least one of the subgroups; a method for denying principal's solely in the first group access to the resource comprising the steps of: (a) receiving a request from a principal for access to the system resource; (b) determining whether the requesting principal is a member of one of the subgroups not the first group; and (c) denying the requesting principal access to the resource if the principal is not a member of one of the other subgroups, whereby principal solely in the first group are denied access to the resource.
Claim 3
Dependent Claim
141 words
In a distributed computing system having a system resource, (A) in which a plurality of principals are divided into a plurality of groups including a first group which is one subgroup of a second group which includes other subgroups; and (B) in which principals derive their membership in the second group through membership in at least one of the subgroups; a method for denying principals solely in the first group access to the resource comprising the steps of: (a) receiving a request from a principal for access to the system resource; (b) determining whether the requesting principal derives its membership in the second group solely through its membership in the first group; and (c) granting the requesting principal access to the resource if the principal does not derive its membership in the second group solely through membership in the first group.
Claim 4
Dependent Claim
141 words
In a distributed computing system having a system resource, (A) in which a plurality of principals are divided into a plurality of groups including a first group which is one subgroup of a second group which includes other subgroups; and (B) in which principals derive their membership in the second group through membership in at least one of the subgroups; a method for denying principals solely in the first group access to the resource comprising the steps of: (a) receiving a request from a principal for access to the system resource; (b) determining whether the requesting principal derives its membership in the second group solely through its membership in the first group; and (c) granting the requesting principal access to the resource if the principal does not derive its membership in the second group solely through membership in the first group.
Claim 5
Dependent Claim
35 words
The method of claim 2 including the step (d) of denying the principal access to the resource if it does derive its membership in the second group solely through its membership in the first group.
References Cited (Backward Citations)
US4405829A
Cited
US4309569A
Cited
US4504907A
Cited
US4779224A
Cited
US4771459A
Cited
US4890321A
Cited
US4887077A
Cited
US5003595A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1996-06-14 | 1996-12-14 | 1997-06-15 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2000-06-14 | 2000-12-14 | 2001-06-15 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2004-06-14 | 2004-12-14 | 2005-06-15 | $7700.00 | Window Closed / Lapsed |