US5577252A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Methods and apparatus for implementing secure name servers in an object-oriented system
Assignee: Sun Microsystems Inc
•
Filing: 1993-07-28
•
Granted: 1996-11-19
•
Expires: 2013-07-28
Abstract
Abstract A secure naming model for objects in an object-oriented system, wherein names are bound to objects within context objects. The context objects are implemented by name servers, and clients request that a context object "resolve" the name for the object. The name server that implements the context returns a duplicate of the desired object. If a name resolution involves more than one name server, an assurance of security is provided by the first name server to the second name server.
Inventors
- 👤 Michael N. Nelson
- 👤 Sanjay R. Radia
- 👤 Graham Hamilton
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-26 22:22
CPC Classifications
G; G06; G06F; G06F9/00; G06F9/06; G06F9/44; G06F9/448; G06F9/4488; G06F9/4493; G06F2209/00; G06F2209/46; G06F2209/462
Claims Analysis
Total Claims: 15
Claim 1
Independent Claim
250 words
A computer implemented method for providing a secure naming system for a set of objects in an object-oriented system having a plurality of name servers, said method comprising the steps of: implementing a first context object in a first name server, said first context object comprising a first encapsulated principal identifier and at least one name binding, each of said name bindings comprising a name and an object; implementing a second context object in a second name server, said second context object comprising a second encapsulated principal identifier and at least one name binding, each of said name bindings comprising a name and an object; binding said second context object to a second context name within said first context object; binding a desired first object to a first object name within said second context object; requesting said desired first object for a client using a path name comprised of said second context name and said first object name and a desired set of access rights; and resolving said request for said desired first object by performing the steps of resolving said second context name to receive a representation of said second context object located in said second name server; assuring said second name server that a name resolution from said first name server to said second name server is secure; resolving said first object name within said second context object to receive a duplicate of said desired object that encapsulates the first encapsulated principal identifier and the desired access rights.
Claim 2
Dependent Claim
250 words
A computer implemented method for providing a secure naming system for a set of objects in an object-oriented system having a plurality of name servers, said method comprising the steps of: implementing a first context object in a first name server, said first context object comprising a first encapsulated principal identifier and at least one name binding, each of said name bindings comprising a name and an object; implementing a second context object in a second name server, said second context object comprising a second encapsulated principal identifier and at least one name binding, each of said name bindings comprising a name and an object; binding said second context object to a second context name within said first context object; binding a desired first object to a first object name within said second context object; requesting said desired first object for a client using a path name comprised of said second context name and said first object name and a desired set of access rights; and resolving said request for said desired first object by performing the steps of resolving said second context name to receive a representation of said second context object located in said second name server; assuring said second name server that a name resolution from said first name server to said second name server is secure; resolving said first object name within said second context object to receive a duplicate of said desired object that encapsulates the first encapsulated principal identifier and the desired access rights.
Claim 3
Dependent Claim
73 words
The method of claim 1, wherein said step of assuring said second name server that a name resolution from said first name server to said second name server is secure comprises the steps of: comparing said first encapsulated principal identifier in said first context object with said second encapsulated principal identifier in said second context object; and granting assurance if said first encapsulated principal identifier and said second encapsulated principal identifier are equal.
Claim 4
Dependent Claim
59 words
The method of claim 1, wherein said step of assuring said second name server that a name resolution from said first name server to said second name server is secure comprises the step of providing a special relationship between said first name server and said second name server such that said second name server trusts said first name server.
Claim 5
Dependent Claim
68 words
The method of claim 1, wherein said step of assuring said second name server that a name resolution from said first name server to said second name server is secure comprises the steps of: raising a "cannot proceed" exception with said client; returning a powerless duplicate of said second context object and said first object name to said client; and authenticating said client with said second name server.
Claim 6
Independent Claim
297 words
An apparatus for providing a secure naming system for a set of objects in an object-oriented system having a plurality of name servers, comprising: a first name server, said first name server having at least one context object, each of said context objects having an encapsulated principal identifier; a first context object within said first name server, said first context object comprising a first encapsulated principal identifier and at least one name binding, each of said name bindings comprising a name and an object; a second name server, said second name server having at least one context object, each of said context objects having an encapsulated principal identifier; a second context object within said second name server, said second context object comprising a second encapsulated principal identifier and at least one name binding, each of said name bindings comprising a name and an object; means for binding said second context object to a second context name within said first context object; means for binding a desired first object to a first object name within said second context object; means for requesting said desired first object for a client using a path name comprised of said second context name and said first object name and a desired set of access rights; and means for resolving said request for said desired first object by resolving said second context name to receive a representation of said second context object located in said second name server, and then assuring said second name server that a name resolution from said first name server to said second name server is secure, and then resolving said first object name within said second context object to receive a duplicate of said desired object that encapsulates the first encapsulated principal identifier and the desired access rights.
Claim 7
Independent Claim
297 words
An apparatus for providing a secure naming system for a set of objects in an object-oriented system having a plurality of name servers, comprising: a first name server, said first name server having at least one context object, each of said context objects having an encapsulated principal identifier; a first context object within said first name server, said first context object comprising a first encapsulated principal identifier and at least one name binding, each of said name bindings comprising a name and an object; a second name server, said second name server having at least one context object, each of said context objects having an encapsulated principal identifier; a second context object within said second name server, said second context object comprising a second encapsulated principal identifier and at least one name binding, each of said name bindings comprising a name and an object; means for binding said second context object to a second context name within said first context object; means for binding a desired first object to a first object name within said second context object; means for requesting said desired first object for a client using a path name comprised of said second context name and said first object name and a desired set of access rights; and means for resolving said request for said desired first object by resolving said second context name to receive a representation of said second context object located in said second name server, and then assuring said second name server that a name resolution from said first name server to said second name server is secure, and then resolving said first object name within said second context object to receive a duplicate of said desired object that encapsulates the first encapsulated principal identifier and the desired access rights.
Claim 8
Dependent Claim
74 words
The apparatus of claim 5, wherein said means for assuring said second name server that a name resolution from said first name server to said second name server is secure comprises: means for comparing said first encapsulated principal identifier in said first context object with said second encapsulated principal identifier in said second context object; and means for granting assurance if said first encapsulated principal identifier and said second encapsulated principal identifier are equal.
Claim 9
Dependent Claim
58 words
The apparatus of claim 5, wherein said means for assuring said second name server that a name resolution from said first name server to said second name server is secure comprises means for providing a special relationship between said first name server and said second name server such that said first name server trusts said second name server.
Claim 10
Dependent Claim
71 words
The apparatus of claim 5, wherein said means for assuring said second name server that a name resolution from said first name server to said second name server is secure comprises: means for raising a "cannot proceed" exception with said client; means for returning a powerless duplicate of said second context object and said first object name to said client; and means for authenticating said client with said second name server.
Claim 11
Dependent Claim
212 words
In an object-oriented system, said object-oriented system having a first name server having a first context object with a first encapsulated principal identifier, a second name server having a second context object with a second encapsulated principal identifier, a method for providing a secure naming system comprising the steps of: binding said second context object to a second context name within said first context object; binding a desired first object to a first object name within said second context object; sending an object request from a client to said first context object for said desired first object using a path name comprised of said second context name and said first object name and a desired set of access rights; and resolving said object request for said desired first object by performing a series of steps comprising resolving said second context name within said first context object to receive a representation of said second context object located in said second name server, assuring said second name server that a name resolution from said first name server to said second name server is secure, resolving said first object name within said second context object to receive a duplicate of said desired object that encapsulates the first encapsulated principal identifier and the desired access rights.
Claim 12
Dependent Claim
212 words
In an object-oriented system, said object-oriented system having a first name server having a first context object with a first encapsulated principal identifier, a second name server having a second context object with a second encapsulated principal identifier, a method for providing a secure naming system comprising the steps of: binding said second context object to a second context name within said first context object; binding a desired first object to a first object name within said second context object; sending an object request from a client to said first context object for said desired first object using a path name comprised of said second context name and said first object name and a desired set of access rights; and resolving said object request for said desired first object by performing a series of steps comprising resolving said second context name within said first context object to receive a representation of said second context object located in said second name server, assuring said second name server that a name resolution from said first name server to said second name server is secure, resolving said first object name within said second context object to receive a duplicate of said desired object that encapsulates the first encapsulated principal identifier and the desired access rights.
Claim 13
Dependent Claim
54 words
The method of claim 9, wherein said step of assuring said second name server comprises the steps of: comparing said first encapsulated principal in said first context object with said second encapsulated principal in said second context object; and granting security assurance if said first encapsulated principal and said second encapsulated principal are equal.
Claim 14
Dependent Claim
43 words
The method of claim 9, wherein said step of assuring said second name server comprises the step of providing a special relationship between said first name server and said second name server such that said second name server trusts said first name server.
Claim 15
Dependent Claim
52 words
The method of claim 9, wherein said step of assuring said second name server comprises the steps of: raising a "cannot proceed" exception with said client; returning a powerless duplicate of said second context object and said first object name to said client; and authenticating said client with said second name server.
References Cited (Backward Citations)
US5253297A
Cited
US5377323A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1999-11-19 | 2000-05-20 | 2000-11-19 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2003-11-19 | 2004-05-20 | 2004-11-19 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2007-11-19 | 2008-05-20 | 2008-11-19 | $7700.00 | Window Closed / Lapsed |