US5339403A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Access control in a distributed computer system
Assignee: Fujitsu Services Ltd
•
Filing: 1993-04-05
•
Granted: 1994-08-16
•
Expires: 2013-04-05
Abstract
Abstract A distributed computer system, has a number of users and target applications. When a user logs on to the system, an authentication unit issues the user with a privilege attribute certificate (PAC) representing the user's access rights. When the user wishes to access a target application, he presents the PAC to that application as evidence of his access rights. The application, in turn, passes the PAC to a PAC use monitor (PUM) which validates the PAC. The PUM is shared between a plurality of applications.
Inventors
- 👤 Thomas A. Parker
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-27 04:06
CPC Classifications
G; G06; G06F; G06F9/00; G06F9/06; G06F9/46; G06F9/468; G06F21/00; G06F21/30; G06F21/31; G06F21/41; G06F21/60; G06F21/62; G06F21/6218; G06F21/629; G06F2211/00; G06F2211/007; G06F2221/00; G06F2221/21; G06F2221/2141
Claims Analysis
Total Claims: 4
Claim 1
Independent Claim
171 words
In a distributed computer system, a method of controlling access from a user program to a plurality of target programs, the method comprising the steps: (a) issuing said user program with an encrypted privilege attribute certificate (PAC), said PAC indicating which of said target programs the user program is permitted to access, (b) transmitting the encrypted PAC from the user program to one of the target programs, (c) transmitting the encrypted PAC from said one of the target programs to a validation unit, (d) in the validation unit, decrypting the encrypted PAC and checking whether the PAC permits the user program to access said one of the target programs, (e) returning a message from the validation unit to said one of the target programs, indicating whether the user program is permitted to access said one of the target programs, and (f) returning a success/failure indication from said one of the target programs to said user program indicating whether the user program is permitted to access said one of the target programs.
Claim 2
Dependent Claim
171 words
In a distributed computer system, a method of controlling access from a user program to a plurality of target programs, the method comprising the steps: (a) issuing said user program with an encrypted privilege attribute certificate (PAC), said PAC indicating which of said target programs the user program is permitted to access, (b) transmitting the encrypted PAC from the user program to one of the target programs, (c) transmitting the encrypted PAC from said one of the target programs to a validation unit, (d) in the validation unit, decrypting the encrypted PAC and checking whether the PAC permits the user program to access said one of the target programs, (e) returning a message from the validation unit to said one of the target programs, indicating whether the user program is permitted to access said one of the target programs, and (f) returning a success/failure indication from said one of the target programs to said user program indicating whether the user program is permitted to access said one of the target programs.
Claim 3
Dependent Claim
54 words
The method according to claim 1 wherein each PAC contains a cryptographic key, and wherein the validation unit, when it determines that the user program is permitted to access said one of the target programs, supplies said cryptographic key to said one of the target programs for use in communicating with the user program.
Claim 4
Dependent Claim
56 words
The method according to claim 1 wherein each PAC has a PAC qualifier associated with it, and wherein the validation unit permits a PAC with a particular PAC qualifier to be used to gain access to a target program up to a maximum number of times as specified by a count value in the PAC qualifier.
References Cited (Backward Citations)
US4177510A
Cited
US4064494A
Cited
US4017839A
Cited
US4211393A
Cited
US4442484A
Cited
US4644493A
Cited
US5043878A
Cited
US4757533A
Cited
US4817140A
Cited
US4916738A
Cited
US5146575A
Cited
US4962531A
Cited
US5140684A
Cited
US5091902A
Cited
US4919545A
Cited
US4980912A
Cited
US5113442A
Cited
US5065429A
Cited
US5191611A
Cited
US5127099A
Cited
US5003595A
Cited
US5157777A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1997-08-15 | 1998-02-14 | 1998-08-16 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2001-08-15 | 2002-02-14 | 2002-08-16 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2005-08-15 | 2006-02-14 | 2006-08-16 | $7700.00 | Window Closed / Lapsed |