Patent US6387380B1 successfully refreshed from Google Patents.
US5335346A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Access control policies for an object oriented database, including access control lists which span across object boundaries
Assignee: IPG Healthcare 501 Ltd
•
Filing: 1991-12-12
•
Granted: 1994-08-02
•
Expires: 2011-12-12
Abstract
Abstract The system and method of this invention provides an access control list which spans across object boundaries in an object oriented database. In addition to providing read and write access permissions, the access control list provides execute semantics which apply to the execution of methods in an object oriented database. Within the entries of the access control lists, each of the permissions for read, write, and execute can be assigned separately to each of a number of ids representing user ids or group ids. Upon request for access to the data by the user, the user id of the user and the group ids for which the user is a member are searched for within the entries to determine whether the user has the privileges to perform the operation requested against the objects. In addition, the access control policies are inherited from an object's superobject; resulting in a least privilege for the object.
Inventors
- 👤 Robert A. Fabbio
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-25 20:30
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/60; G06F21/62; G06F21/6218; G06F21/6227; G06F16/00; G06F16/20; G06F16/28; G06F16/289; G06F2221/00; G06F2221/21; G06F2221/2141; G06F2221/2145; G06F2221/2149
Claims Analysis
Total Claims: 4
Claim 1
Independent Claim
154 words
A method for controlling access privileges to data, said method comprising: assigning at least one access control policy associated with a plurality of dynamically assignable groups across a plurality of dynamically extendable external objects in an object oriented database; traversing objects to dynamically extend access control policies to encompass a newly extended object; controlling a plurality of operations including an execute operation applied to execution of a plurality of methods to at least one of said plurality of dynamically extendable objects based on said assignment and at last one credential of a user requesting access to said data represented by at least one of said plurality of dynamically extendable; and inheriting said assigned at least one access control policy by a second of said external objects descending from said at least one object; said inheriting further including determining a least amount of privilege associated with at least one composite object accessed by said user.
Claim 2
Independent Claim
154 words
A method for controlling access privileges to data, said method comprising: assigning at least one access control policy associated with a plurality of dynamically assignable groups across a plurality of dynamically extendable external objects in an object oriented database; traversing objects to dynamically extend access control policies to encompass a newly extended object; controlling a plurality of operations including an execute operation applied to execution of a plurality of methods to at least one of said plurality of dynamically extendable objects based on said assignment and at last one credential of a user requesting access to said data represented by at least one of said plurality of dynamically extendable; and inheriting said assigned at least one access control policy by a second of said external objects descending from said at least one object; said inheriting further including determining a least amount of privilege associated with at least one composite object accessed by said user.
Claim 3
Independent Claim
167 words
A system for controlling access privileges to data, said system comprising: means for assigning at least one access control policy associated with a plurality of dynamically assignable groups across a plurality of dynamically extendable external objects in an object oriented database; means for traversing objects to dynamically extend access control policies to encompass a newly extended object; means for controlling a plurality of operations including an execute operation applied to execution of a plurality of methods to at lest one of said plurality of dynamically extendable objects based on said assignment and at least one credential of a user requesting access to said data represented by at least one of said plurality of dynamically extendable objects; and means for inheriting said assigned at least one access control policy by a second of said external objects descending from said at least one object; said means for inheriting further including means for determining a least amount of privilege associated with at least one composite object accessed by said user.
Claim 4
Independent Claim
167 words
A system for controlling access privileges to data, said system comprising: means for assigning at least one access control policy associated with a plurality of dynamically assignable groups across a plurality of dynamically extendable external objects in an object oriented database; means for traversing objects to dynamically extend access control policies to encompass a newly extended object; means for controlling a plurality of operations including an execute operation applied to execution of a plurality of methods to at lest one of said plurality of dynamically extendable objects based on said assignment and at least one credential of a user requesting access to said data represented by at least one of said plurality of dynamically extendable objects; and means for inheriting said assigned at least one access control policy by a second of said external objects descending from said at least one object; said means for inheriting further including means for determining a least amount of privilege associated with at least one composite object accessed by said user.
References Cited (Backward Citations)
US4455602A
Cited
US4498131A
Cited
US4498132A
Cited
US4545012A
Cited
US4675810A
Cited
US4731734A
Cited
US4621321A
Cited
US4675829A
Cited
US5206951A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1997-08-01 | 1998-01-31 | 1998-08-02 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2001-08-01 | 2002-01-31 | 2002-08-02 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2005-08-01 | 2006-01-31 | 2006-08-02 | $7700.00 | Window Closed / Lapsed |