US5590266A — Integrity mechanism for data transfer in a window…

Claim 1

Independent Claim 126 words

A regrading selection mechanism for a secure windowing system comprising: a plurality of client programs running in separate window on said windowing system, each of said programs displaying data within its window; a client called a Selection Manager for cutting and pasting operations to transfer data from one client program window to another client program window, the Selection Manager meeting Compartmented Mode Workstations (CMW) requirements and sending events to applications to notify the application of any changes in state, said Selection Manager manipulating ownership and other security properties of data being transferred to allow a controlled verifiable data transfer to take place; wherein the windowing system uses dummy window identifications (IDs) in communicating to a lower level process during a Mandatory Access Control (MAC) upgrade operation.

Claim 2

Dependent Claim 126 words

A regrading selection mechanism for a secure windowing system comprising: a plurality of client programs running in separate window on said windowing system, each of said programs displaying data within its window; a client called a Selection Manager for cutting and pasting operations to transfer data from one client program window to another client program window, the Selection Manager meeting Compartmented Mode Workstations (CMW) requirements and sending events to applications to notify the application of any changes in state, said Selection Manager manipulating ownership and other security properties of data being transferred to allow a controlled verifiable data transfer to take place; wherein the windowing system uses dummy window identifications (IDs) in communicating to a lower level process during a Mandatory Access Control (MAC) upgrade operation.

Claim 3

Dependent Claim 50 words

The regrading selection mechanism recited in claim 1 wherein, for all regrading operations, the windowing system will, before a selection has been transferred, send an event to the Selection Manager that causes the Selection Manager to put up a pop-up requesting user confirmation before the transfer is allowed to proceed.

Claim 4

Independent Claim 130 words

A method for secure transfer of data having security attributes in a secure windowing system comprising the steps of: receiving by the windowing system a request for a data transfer from a requester having a predefined security level for access to data; and creating by a client program called a Selection Manager running on said windowing system a special window and property which inherit a selection owner's security attributes, said special window being made available to the selection owner so that window and property identifications (IDs) that were specified by the requester are concealed from the selection owner preventing the owner of the selection from obtaining any security relevant information about the requester when the requester is communicating with a lower level process on a Mandatory Access Control (MAC) upgrade.

Claim 5

Independent Claim 130 words

A method for secure transfer of data having security attributes in a secure windowing system comprising the steps of: receiving by the windowing system a request for a data transfer from a requester having a predefined security level for access to data; and creating by a client program called a Selection Manager running on said windowing system a special window and property which inherit a selection owner's security attributes, said special window being made available to the selection owner so that window and property identifications (IDs) that were specified by the requester are concealed from the selection owner preventing the owner of the selection from obtaining any security relevant information about the requester when the requester is communicating with a lower level process on a Mandatory Access Control (MAC) upgrade.

Claim 6

Dependent Claim 86 words

The secure data transfer method recited in claim 3, further comprising the steps of: transferring by the selection owner the selection data to the Selection Manager, the Selection Manager becoming the owner of the data and having exclusive rights to it until the transfer is completed; and providing a user interface that allows a logged in user to examine the data being transferred from the selection owner to the selection requester and, for regrading operations, requests user confirmation before the data transfer is allowed to proceed.

Claim 7

Dependent Claim 39 words

The secure data transfer method recited in claim 4, further comprising the step of generating audit events when operations involving the use of MAC downgrading is attempted and also when security violations involving data transfers and reclassifications are committed.

Claim 8

Dependent Claim 36 words

The secure data transfer method recited in claim 5, further comprising the step of providing a selection mechanism having sufficient privilege to override discretionary access control (DAC) write access restrictions on the requester's window and property.

Claim 9

Independent Claim 250 words

A method of secure transfer of data having security attributes in a secure windowing system between a Selection Requester and a Selection Owner comprising the steps of: issuing by the Selection Requester request which is forwarded to a client called a Selection Manager running the windowing system; displaying by the Selection Manager Mandatory Access Control (MAC) and Discretionary Access Control (DAC) dialogs; creating by the Selection Manager a property on its own window that the owner of the selection can later post the selection on and then generating a selection request and sending the selection request to the selection owner as the originally intended recipient; in response to the selection request, posting by the selection owner the selection data on the Selection Manager's property and issuing a selection notify event to the Selection Manager; allowing the user to examine the data being passed from the Selection Owner to the Selection Requester so that the user can permit the request to pass unmodified, cancel the request or down grade the data being transferred; generating an audit event in the event of a cancellation of the request by the user; transferring by the Selection Manager the selection data from its own window/property to the selection requester's window/property and issuing a notification to the requester of the selection's availability on the property; reading by the Selection Requester the data and then issuing a notification to the Selection Manager; and notifying the owner by the Selection Manager of the completion of the data transfer.

Claim 10

Independent Claim 250 words

A method of secure transfer of data having security attributes in a secure windowing system between a Selection Requester and a Selection Owner comprising the steps of: issuing by the Selection Requester request which is forwarded to a client called a Selection Manager running the windowing system; displaying by the Selection Manager Mandatory Access Control (MAC) and Discretionary Access Control (DAC) dialogs; creating by the Selection Manager a property on its own window that the owner of the selection can later post the selection on and then generating a selection request and sending the selection request to the selection owner as the originally intended recipient; in response to the selection request, posting by the selection owner the selection data on the Selection Manager's property and issuing a selection notify event to the Selection Manager; allowing the user to examine the data being passed from the Selection Owner to the Selection Requester so that the user can permit the request to pass unmodified, cancel the request or down grade the data being transferred; generating an audit event in the event of a cancellation of the request by the user; transferring by the Selection Manager the selection data from its own window/property to the selection requester's window/property and issuing a notification to the requester of the selection's availability on the property; reading by the Selection Requester the data and then issuing a notification to the Selection Manager; and notifying the owner by the Selection Manager of the completion of the data transfer.

Claim 11

Dependent Claim 39 words

The secure data transfer method recited in claim 7 wherein said step of transferring by the Selection Manager is performed incrementally, further comprising the step of prompting the user to specify whether each transfer is to be separately labeled.

Annuity Stage	Window Opens	Payment Deadline	Surcharge Period Until	Estimated Fee	Status
3.5 Years (Year 4)	1999-12-31	2000-07-01	2000-12-31	$2000.00	Window Closed / Lapsed
7.5 Years (Year 8)	2003-12-31	2004-07-01	2004-12-31	$3760.00	Window Closed / Lapsed
11.5 Years (Year 12)	2007-12-31	2008-07-01	2008-12-31	$7700.00	Window Closed / Lapsed

Integrity mechanism for data transfer in a windowing system

Abstract

Inventors

Bibliographic Details

Claims Analysis

References Cited (Backward Citations)

USPTO Annuity & Maintenance Windows

Assigned Categories & Tags

Assign Category Tag