US5347578A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Computer system security
Assignee: Fujitsu Services Ltd
•
Filing: 1993-02-24
•
Granted: 1994-09-13
•
Expires: 2013-02-24
Abstract
Abstract A computer system is described in which users can access a protected resource only by way of a call to a user monitor command, specifying the protected resource as a parameter. The user monitor command checks that certain conditions are satisfied and performs specified actions before permitting access to the protected resource. The checks may include checking whether options and argument values supplied by the user satisfy specified conditions. The actions may include dynamically modifying a supplementary groups list of a current process temporarily granting or removing privileges to or from the user.
Inventors
- 👤 Paul Duxbury
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-29 16:21
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/60; G06F21/62; G06F21/6218; G06F21/6281; G06F2221/00; G06F2221/21; G06F2221/2101; Y; Y10; Y10S; Y10S707/00; Y10S707/99931; Y10S707/99939
Claims Analysis
Total Claims: 10
Claim 1
Independent Claim
101 words
A computer system comprising (a) a computer providing a plurality of protected resources, (b) a plurality of user access means attached to the computer for allowing each user to send commands to the computer, said commands including a user monitor command containing an argument specifying one of said protected resources, and (c) command execution means in said computer, for executing said user monitor command by checking that predetermined conditions are satisfied and then, provided that said predetermined conditions are satisfied, for acessing said one of said protected resources on behalf of said user, and then returning a result to the user.
Claim 2
Dependent Claim
101 words
A computer system comprising (a) a computer providing a plurality of protected resources, (b) a plurality of user access means attached to the computer for allowing each user to send commands to the computer, said commands including a user monitor command containing an argument specifying one of said protected resources, and (c) command execution means in said computer, for executing said user monitor command by checking that predetermined conditions are satisfied and then, provided that said predetermined conditions are satisfied, for acessing said one of said protected resources on behalf of said user, and then returning a result to the user.
Claim 3
Dependent Claim
29 words
A system according to claim 1 wherein the checks performed by the user monitor command include checking whether options and argument values supplied by the user satisfy specified conditions.
Claim 4
Dependent Claim
33 words
A system according to claim 1 including means responsive to said monitor command for performing predetermined actions before access is permitted in order to ensure that access is made in a controlled manner.
Claim 5
Dependent Claim
18 words
A system according to claim 3 wherein said actions include dynamically modifying a current process's supplementary groups list.
Claim 6
Dependent Claim
27 words
A system according to claim 3 wherein said actions include granting or removing privileges to or from the user while said user monitor command is being executed.
Claim 7
Dependent Claim
25 words
A system according to claim 1, including a database accessible by said monitoring means, for indicating which users are permitted to indirectly access which resources.
Claim 8
Dependent Claim
28 words
A system according to claim 6 wherein said database also indicates the conditions that are to be satisfied and actions that are to be performed before permitting access.
Claim 9
Dependent Claim
33 words
A system according to claim 6 wherein said database also indicates which of a predetermined set of roles are available to each user, and indicates which roles are permitted to access which resources.
Claim 10
Dependent Claim
15 words
A system according to claim 1 wherein said protected resources comprise means for executing commands.
References Cited (Backward Citations)
EP0456386A2
Cited
US5077795A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1997-09-12 | 1998-03-14 | 1998-09-13 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2001-09-12 | 2002-03-14 | 2002-09-13 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2005-09-12 | 2006-03-14 | 2006-09-13 | $7700.00 | Window Closed / Lapsed |