US5414844A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and system for controlling public access to a plurality of data objects within a data processing system
Assignee: International Business Machines Corp
•
Filing: 1990-05-24
•
Granted: 1995-05-09
•
Expires: 2010-05-24
Abstract
Abstract A method and system is disclosed for efficiently controlling public access to a plurality of data objects stored within a data processing system. An access control profile is associated with each data object. Each access control profile preferably includes an explicit authorization parameter listing the identity of a particular user and the authorization level granted to that user; a shared authorization parameter listing the identities of a plurality of users and the authorization level granted to each listed user; and, a public authorization parameter listing the authorization level granted to each user not specifically set forth within the access control profile. A single "public" user identity is then defined for all users not specifically set forth within the access control profile, and that identity, as well as a public authorization level for an entire group of data objects is listed within a single shared authorization parameter. That shared authorization parameter is then placed within the access control profile of each data object within the group. Thereafter, a reference to the shared authorization parameter is placed within the public authorization parameter of each data object within the group so that public access to the entire group of data objects may be centrally controlled by means of a single shared authorization parameter.
Inventors
- 👤 Diana S. Wang
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-27 16:05
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/60; G06F21/62; G06F21/6218; G06F2221/00; G06F2221/21; G06F2221/2141
Claims Analysis
Total Claims: 6
Claim 1
Independent Claim
420 words
A method in a data processing system for controlling public access to a plurality of data objects stored therein, said data processing system having an access control profile associated with each data object stored therein, each access control profile including: an explicit authorization parameter listing the identity of a user and the authorization level granted to that user; a shared authorization parameter setting forth a shared authorization list associated with the access control profile of each of a plurality of data objects and containing the identities of a plurality of users and the authorization level granted to each listed user; and, a public authorization parameter listing the authorization level granted to each user not specifically identified within said access control profile, said method comprising the data processing system implemented steps of: creating and storing within said shared authorization list a "public" user identity for users not specifically identified within the access control profiles of the plurality of data objects; listing within said shared authorization list within said data processing system an authorization level for said "public" user identity for all of a plurality of data objects within said data processing system; listing said shared authorization list within a shared authorization parameter within the access control profile of each of said plurality of data objects within said data processing system; storing a reference within said public authorization parameter to said shared authorization parameter within the access control profile of each of said plurality of data objects within said data processing system; and thereafter, controlling public access for each of said plurality of data objects by: accessing said shared authorization parameter by accessing said reference to said shared authorization parameter stored within said public authorization parameter within the access control profile of a selected one of said plurality of data objects in response to an attempted access by a user after it is determined that the user is not listed within said explicit authorization parameter for said selected one of said plurality of data objects; accessing said shared authorization list set forth within said shared authorization parameter within the access control profile of said selected one of said plurality of data objects; and granting access to said selected one of said plurality of data objects by said user not listed within said explicit authorization parameter for said selected one of said plurality of data objects in accordance with an authorization level granted to said "public" user identity within said shared authorization list for said selected one of said plurality of data objects.
Claim 2
Independent Claim
420 words
A method in a data processing system for controlling public access to a plurality of data objects stored therein, said data processing system having an access control profile associated with each data object stored therein, each access control profile including: an explicit authorization parameter listing the identity of a user and the authorization level granted to that user; a shared authorization parameter setting forth a shared authorization list associated with the access control profile of each of a plurality of data objects and containing the identities of a plurality of users and the authorization level granted to each listed user; and, a public authorization parameter listing the authorization level granted to each user not specifically identified within said access control profile, said method comprising the data processing system implemented steps of: creating and storing within said shared authorization list a "public" user identity for users not specifically identified within the access control profiles of the plurality of data objects; listing within said shared authorization list within said data processing system an authorization level for said "public" user identity for all of a plurality of data objects within said data processing system; listing said shared authorization list within a shared authorization parameter within the access control profile of each of said plurality of data objects within said data processing system; storing a reference within said public authorization parameter to said shared authorization parameter within the access control profile of each of said plurality of data objects within said data processing system; and thereafter, controlling public access for each of said plurality of data objects by: accessing said shared authorization parameter by accessing said reference to said shared authorization parameter stored within said public authorization parameter within the access control profile of a selected one of said plurality of data objects in response to an attempted access by a user after it is determined that the user is not listed within said explicit authorization parameter for said selected one of said plurality of data objects; accessing said shared authorization list set forth within said shared authorization parameter within the access control profile of said selected one of said plurality of data objects; and granting access to said selected one of said plurality of data objects by said user not listed within said explicit authorization parameter for said selected one of said plurality of data objects in accordance with an authorization level granted to said "public" user identity within said shared authorization list for said selected one of said plurality of data objects.
Claim 3
Dependent Claim
47 words
The method in a data processing system for controlling public access to a plurality of data objects stored therein according to claim 1, further including the step of storing an identity of an owner of each of said plurality of data objects within said access control profile.
Claim 4
Dependent Claim
413 words
A data processing system for controlling public access to a plurality of data objects stored therein, said data processing system having an access control profile associated with each data object stored therein, each access control profile including: an explicit authorization parameter listing the identity of a user and the authorization level granted to that user; a shared authorization parameter setting forth a shared authorization list associated with the access control profile of each of a plurality of data objects and containing the identities of a plurality of users and the authorization level granted to each listed user; and, a public authorization parameter listing the authorization level granted to each user not specifically identified within said access control profile, said data processing system comprising: a storage device; storage means for storing within said storage device within said shared authorization list a "public" user identity created for users not specifically identified within the access control profiles of the plurality of data objects, means for listing within said shared authorization list an authorization level for said "public" user identity for all of a plurality of data objects within said data processing system; means for listing said shared authorization list within a shared authorization parameter within the access control profile of each of said plurality of data objects within said data processing system; means for storing a reference within said public authorization parameter to said shared authorization parameter within the access control profile of each of said plurality of data objects within said data processing system; and control means for controlling public access for each of said plurality of data objects, the control means including: means for accessing said shared authorization parameter by accessing said reference to said shared authorization parameter stored within said public authorization parameter within the access control profile of a selected one of said plurality of data objects in response to an attempted access by a user after it is determined that the user is not listed within said explicit authorization parameter for said selected one of said plurality of data objects; means for accessing said shared authorization list set forth within said shared authorization parameter within the access control profile of said selected one of said plurality of data objects; and means for granting access to said selected one of said plurality of data objects in accordance with an authorization level granted to said "public" user identity within said shared authorization list for said selected one of said plurality of data objects.
Claim 5
Dependent Claim
413 words
A data processing system for controlling public access to a plurality of data objects stored therein, said data processing system having an access control profile associated with each data object stored therein, each access control profile including: an explicit authorization parameter listing the identity of a user and the authorization level granted to that user; a shared authorization parameter setting forth a shared authorization list associated with the access control profile of each of a plurality of data objects and containing the identities of a plurality of users and the authorization level granted to each listed user; and, a public authorization parameter listing the authorization level granted to each user not specifically identified within said access control profile, said data processing system comprising: a storage device; storage means for storing within said storage device within said shared authorization list a "public" user identity created for users not specifically identified within the access control profiles of the plurality of data objects, means for listing within said shared authorization list an authorization level for said "public" user identity for all of a plurality of data objects within said data processing system; means for listing said shared authorization list within a shared authorization parameter within the access control profile of each of said plurality of data objects within said data processing system; means for storing a reference within said public authorization parameter to said shared authorization parameter within the access control profile of each of said plurality of data objects within said data processing system; and control means for controlling public access for each of said plurality of data objects, the control means including: means for accessing said shared authorization parameter by accessing said reference to said shared authorization parameter stored within said public authorization parameter within the access control profile of a selected one of said plurality of data objects in response to an attempted access by a user after it is determined that the user is not listed within said explicit authorization parameter for said selected one of said plurality of data objects; means for accessing said shared authorization list set forth within said shared authorization parameter within the access control profile of said selected one of said plurality of data objects; and means for granting access to said selected one of said plurality of data objects in accordance with an authorization level granted to said "public" user identity within said shared authorization list for said selected one of said plurality of data objects.
Claim 6
Dependent Claim
43 words
The data processing system for controlling public access to a plurality of data objects stored therein according to claim 3, further including means for storing an identity of an owner of each of said plurality of data objects within said access control profile.
References Cited (Backward Citations)
EP0150522A2
Cited
US5018096A
Cited
US4979098A
Cited
US5093918A
Cited
EP0407060A2
Cited
US5222234A
Cited
US5263165A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1998-05-08 | 1998-11-07 | 1999-05-09 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2002-05-08 | 2002-11-07 | 2003-05-09 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2006-05-08 | 2006-11-07 | 2007-05-09 | $7700.00 | Window Closed / Lapsed |