US5283830A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Security mechanism for a computer system
Assignee: Fujitsu Services Ltd
•
Filing: 1992-09-30
•
Granted: 1994-02-01
•
Expires: 2012-09-30
Abstract
Abstract A computer system includes a plurality of programs and a plurality of accessible objects. Each program has an associated program identifier, and at least some of the objects have respective access control lists (ACL). Each ACL entry may comprise a program identifier key and an access permission indication. When a user attempts to access an object by way of a program, an entry in the ACL of the object is selected by matching the entry keys with at least the program identifier of the program, and access is granted or denied on the basis of the access permission indication in the selected entry.
Inventors
- 👤 Stewart R. Hinsley
- 👤 Christopher D. Hughes
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-25 02:24
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/60; G06F21/62; G06F21/6218; G06F2221/00; G06F2221/21; G06F2221/2141; Y; Y10; Y10S; Y10S707/00; Y10S707/99931; Y10S707/99939
Claims Analysis
Total Claims: 9
Claim 1
Independent Claim
146 words
A computer system including a plurality of programs and a plurality of objects, accessible by a plurality of users, each program having an associated program identifier, each user having a user identifier, and at least some of the objects having respective access control lists (ACL) associated with them, each ACL containing a list of entries, each entry comprising a program identifier key, a user identifier key and an access permission indication, and wherein the system includes means operative when a user attempts to access an object by way of a program, for selecting an entry in the ACL of the object by matching the program identifier key and user identifier key in the entry with the program identifier of the program and the user identifier of the user and for granting or denying access on the basis of the access permission indication in the selected entry.
Claim 2
Dependent Claim
146 words
A computer system including a plurality of programs and a plurality of objects, accessible by a plurality of users, each program having an associated program identifier, each user having a user identifier, and at least some of the objects having respective access control lists (ACL) associated with them, each ACL containing a list of entries, each entry comprising a program identifier key, a user identifier key and an access permission indication, and wherein the system includes means operative when a user attempts to access an object by way of a program, for selecting an entry in the ACL of the object by matching the program identifier key and user identifier key in the entry with the program identifier of the program and the user identifier of the user and for granting or denying access on the basis of the access permission indication in the selected entry.
Claim 3
Dependent Claim
24 words
A system according to claim 1 wherein the program identifier is a certification indication number (CIN) associated with the program by user certification action.
Claim 4
Dependent Claim
19 words
A system according to claim 2 including means for removing certification from a program when the program is modified.
Claim 5
Dependent Claim
23 words
A system according to claim 1 wherein the access permission indication includes means for controlling permission to change the attributes of the object.
Claim 6
Dependent Claim
23 words
A system according to claim 1 wherein the access permission indication includes means for controlling permission to change the name of the object.
Claim 7
Dependent Claim
20 words
A system according to claim 1 wherein the access permission indication includes means for controlling permission to delete the object.
Claim 8
Dependent Claim
39 words
A system according to claim 2 wherein each CIN comprises first and second parts, and wherein the system includes means for allocating said first part without user intervention and means for permitting a user to specify said second part.
Claim 9
Dependent Claim
62 words
A system according to claim 2 wherein each CIN has an inheritance flag associated with it, and wherein the system includes means operative when a new process is created to execute a program, for using the inheritance flag associated with the CIN of that program to control whether the new process derives its CIN from its parent process or from the program.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1997-01-31 | 1997-08-02 | 1998-02-01 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2001-01-31 | 2001-08-02 | 2002-02-01 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2005-01-31 | 2005-08-02 | 2006-02-01 | $7700.00 | Window Closed / Lapsed |