US5452460A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and apparatus for creating secure pseudo-terminal links
Assignee: International Business Machines Corp
•
Filing: 1993-01-27
•
Granted: 1995-09-19
•
Expires: 2013-01-27
Abstract
Abstract A method and apparatus, operating within a kernel of a UNIX-based host computer, that ensures that no unauthorized users or processes have accessed a pseudo-terminal (pty) slave file within a pty device driver prior to an authorized process accessing the pty slave file. Specifically, upon receiving, from an application program, a request to open a pty master file to form a pty device driver, the request is granted by the kernel only if the pty master file and pty slave file are presently closed. Similarly, a request to open a pty slave file to form a pty device driver is granted by the kernel only if the pty master file is open and a user identification of an application attempting to open the slave file is identical to a user identification of the application program which opened the master file. In this manner, a pseudo-terminal link between the pty master file and the pty slave file is secure from unauthorized processes being surreptitiously connected to the pty slave. Additionally, the owner and access permission codes of the open pty slave file are changed thereby further restricting access thereto.
Inventors
- 👤 Robert J. Distelberg
- 👤 John H. Case
- 👤 Richard A. Fabish
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-24 17:11
CPC Classifications
G; G06; G06F; G06F9/00; G06F9/06; G06F9/46; G06F9/468
Claims Analysis
Total Claims: 23
Claim 1
Independent Claim
211 words
In a computer system having an operating system, a method executed within a kernel of said operating system for establishing a secure pseudo-terminal link between a pseudo-terminal master file and an associated pseudo-terminal slave file, said method comprising the steps of: receiving, from a first application program, a first request to open said pseudo-terminal master file; granting said first request if said pseudo-terminal master file and said pseudo-terminal slave file are presently closed, otherwise denying said first request; opening said pseudo-terminal master file whenever said first request is granted; receiving, from a second application program, a second request to open said pseudo-terminal slave file; granting said second request if said pseudo-terminal master file is presently open and a first user identification associated with said first application program which opened said pseudo-terminal master file is identical to a second user identification associated with said second application program presently requesting to open said pseudo-terminal slave file, otherwise denying said second request; changing, whenever said second request is granted, an access permission code and ownership of said associated pseudo-terminal slave file; opening, after said access permission code and ownership are changed, said associated pseudo-terminal slave file; such that said pseudo-terminal master file and said pseudo-terminal slave file are connected by a secure pseudo-terminal link.
Claim 2
Dependent Claim
211 words
In a computer system having an operating system, a method executed within a kernel of said operating system for establishing a secure pseudo-terminal link between a pseudo-terminal master file and an associated pseudo-terminal slave file, said method comprising the steps of: receiving, from a first application program, a first request to open said pseudo-terminal master file; granting said first request if said pseudo-terminal master file and said pseudo-terminal slave file are presently closed, otherwise denying said first request; opening said pseudo-terminal master file whenever said first request is granted; receiving, from a second application program, a second request to open said pseudo-terminal slave file; granting said second request if said pseudo-terminal master file is presently open and a first user identification associated with said first application program which opened said pseudo-terminal master file is identical to a second user identification associated with said second application program presently requesting to open said pseudo-terminal slave file, otherwise denying said second request; changing, whenever said second request is granted, an access permission code and ownership of said associated pseudo-terminal slave file; opening, after said access permission code and ownership are changed, said associated pseudo-terminal slave file; such that said pseudo-terminal master file and said pseudo-terminal slave file are connected by a secure pseudo-terminal link.
Claim 3
Dependent Claim
18 words
The method of claim 1 wherein said first and second application programs are contained within a single program.
Claim 4
Dependent Claim
50 words
The method of claim 1 wherein changing step further comprises the steps of: changing individual ownership of said pseudo-terminal slave file from a first owner name to an effective user identification associated with said second application program; and changing said access permission code from first value to a second value.
Claim 5
Dependent Claim
14 words
The method of claim 3 wherein said first owner name is a superuser name.
Claim 6
Dependent Claim
31 words
The method of claim 3 wherein said first value of said access permission code is rw.rw.rw. and said second value of said access permission code is rw..w. . . . .
Claim 7
Dependent Claim
28 words
The method of claim 3 further comprising the step of: changing group ownership of said pseudo-terminal slave file from a first group name to a second group name.
Claim 8
Dependent Claim
52 words
The method of claim 3 further comprising the steps of: changing, coincident with a final closing of said pseudo-terminal slave file, said access permission code from said second value to said first value and said individual ownership of said pseudo-terminal slave file from said effective user identification to said first owner name.
Claim 9
Dependent Claim
14 words
The method of claim 7 wherein said first owner name is a superuser name.
Claim 10
Dependent Claim
31 words
The method of claim 7 wherein said first value of said access permission code is rw.rw.rw. and said second value of said access permission code is rw..w. . . . .
Claim 11
Dependent Claim
37 words
The method of claim 7 further comprising the step of: changing, upon a final closing of said pseudo-terminal slave file, group ownership of said pseudo-terminal slave file from a second group name to a first group name.
Claim 12
Dependent Claim
19 words
The method of claim 10 wherein said second group name is defined by an implementation of said operating system.
Claim 13
Dependent Claim
232 words
In a computer system having an operating system, apparatus within a kernel of said operating system for establishing a secure pseudo-terminal link between a pseudo-terminal master device driver and an associated pseudo-terminal slave device driver, said apparatus comprising: means for receiving, from a first application program, a first request to open said pseudo-terminal master device driver; means for granting said first request if said pseudo-terminal master device driver and said pseudo-terminal slave device driver be presently closed, otherwise denying said first request; means for opening said pseudo-terminal master device driver whenever said first request is granted; means for receiving, from a second application program, a second request to open said pseudo-terminal slave device driver; means for granting said second request if said pseudo-terminal master device driver be presently open and a first user identification associated with said first application program which opened said pseudo-terminal master device driver be identical to a second user identification associated with said second application program presently requesting to open said pseudo-terminal slave device driver, otherwise denying said second request; means for changing, whenever said second request is granted, an access permission code and ownership of said pseudo-terminal slave device driver; means for opening, after said access permission code and ownership are changed, said pseudo-terminal slave device driver such that said pseudo-terminal master device driver and said pseudo-terminal slave device driver are connected by a secure pseudo-terminal link.
Claim 14
Dependent Claim
232 words
In a computer system having an operating system, apparatus within a kernel of said operating system for establishing a secure pseudo-terminal link between a pseudo-terminal master device driver and an associated pseudo-terminal slave device driver, said apparatus comprising: means for receiving, from a first application program, a first request to open said pseudo-terminal master device driver; means for granting said first request if said pseudo-terminal master device driver and said pseudo-terminal slave device driver be presently closed, otherwise denying said first request; means for opening said pseudo-terminal master device driver whenever said first request is granted; means for receiving, from a second application program, a second request to open said pseudo-terminal slave device driver; means for granting said second request if said pseudo-terminal master device driver be presently open and a first user identification associated with said first application program which opened said pseudo-terminal master device driver be identical to a second user identification associated with said second application program presently requesting to open said pseudo-terminal slave device driver, otherwise denying said second request; means for changing, whenever said second request is granted, an access permission code and ownership of said pseudo-terminal slave device driver; means for opening, after said access permission code and ownership are changed, said pseudo-terminal slave device driver such that said pseudo-terminal master device driver and said pseudo-terminal slave device driver are connected by a secure pseudo-terminal link.
Claim 15
Dependent Claim
18 words
The apparatus of claim 12 wherein said first and second application programs are contained within a single program.
Claim 16
Dependent Claim
57 words
The apparatus of claim 12 wherein said means for changing further comprises: means (535) for changing individual ownership of said pseudo-terminal slave device driver from a first owner name to an effective user identification associated with said second application program; and means (535) for changing said access permission code from a first value to a second value.
Claim 17
Dependent Claim
14 words
The apparatus of claim 14 wherein said first owner name is a superuser name.
Claim 18
Dependent Claim
31 words
The apparatus of claim 14 wherein said first value of said access permission code is rw.rw.rw. and said second value of said access permission code is rw..w . . . .
Claim 19
Dependent Claim
28 words
The apparatus of claim 14 further comprising: means for changing group ownership of said pseudo-terminal slave device driver from a first group name to a second group name.
Claim 20
Dependent Claim
53 words
The apparatus of claim 14 further comprising: means (610) for changing, coincident with a final closing of said pseudo-terminal slave device driver, said access permission code from said second value to said first value and said individual ownership of said pseudo-terminal slave device driver from said user identification to said first owner name.
Claim 21
Dependent Claim
14 words
The apparatus of claim 18 wherein said first owner name is a superuser name.
Claim 22
Dependent Claim
30 words
The apparatus of claim 18 wherein said first value of said access permission code is rw.rw.rw. and said second value of said access permission code is rw..w. . . .
Claim 23
Dependent Claim
36 words
The apparatus of claim 18 wherein said means for changing, upon closing said pseudo-terminal slave device driver, further changes group ownership of said pseudo-terminal slave file from a second group name to a first group name.
References Cited (Backward Citations)
US4672572A
Cited
US4652698A
Cited
US4825354A
Cited
US4882752A
Cited
US4941173A
Cited
US4885789A
Cited
US4949248A
Cited
US5124909A
Cited
US5012515A
Cited
US5073933A
Cited
US5032979A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1998-09-18 | 1999-03-20 | 1999-09-19 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2002-09-18 | 2003-03-20 | 2003-09-19 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2006-09-18 | 2007-03-20 | 2007-09-19 | $7700.00 | Window Closed / Lapsed |