US5604490A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and system for providing a user access to multiple secured subsystems
Assignee: International Business Machines Corp
•
Filing: 1994-09-09
•
Granted: 1997-02-18
•
Expires: 2014-09-09
Abstract
Abstract An improvement relating to the security of an operating system for either a stand alone computer system or for a networked computer system. The operating system provides improved security for programs available on the computer system having different security protocols. The operating system unifies these security protocols for each user based on unique user credentials. The system operates, upon request to start a program procedure by the user, to authenticate the identity of the user based on information unique to that user. Following which, the system generates a user handle associated with the user. The system then notifies each of the security protocols of the user handle associated with the user. The system then generates new user credentials for each of the security protocols. These user credentials are associated with the user handle and then the user handle is mapped to the unique user's credentials for each program procedure. Once this is accomplished, the system invokes an alternate process and tags the process with the user handle. Once a request from the alternate process for access to an object accessed through the server is requested, the system then grants access to the object based on the new user credentials associated with the user handle. The new user credentials are typically based on an association of the user identifier, the user handle, and the unique user credentials from before.
Inventors
- 👤 George R. Blakley, III
- 👤 L. Brooks Hickerson
- 👤 Ivan M. Milman
- 👤 Robert S. Gittins
- 👤 Douglas B. Scheer
- 👤 John H. Wilson
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-28 01:31
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/41; G06F21/60; G06F21/62; G06F21/6218; G06F21/6236
Claims Analysis
Total Claims: 33
Claim 1
Independent Claim
202 words
In a computer networking system having a server coupled to a plurality of clients, wherein each of said plurality of clients has access to a plurality of program procedures, accessed through said server, each said program procedure having a security protocol required for access, unique to each user of each of said plurality of clients, a method for unifying said security protocols for each user based on unique user credentials comprising the steps of: upon request to start a program procedure by said user, authenticating the identity of said user based on information unique to said user; generating a user handle associated with said user; notifying each of said security protocols of said user handle associated with said user; generating new user credentials for each of said security protocol; associating said new user credentials with said user handle associated with said user; mapping said user handle to said unique user's credentials for each program procedure; generating an alternate process; tagging said alternate process with said user handle associated with said user; upon request from said alternate process for access to an object accessed through said server, granting access to said object based on said new user credentials associated with said user handle.
Claim 2
Dependent Claim
202 words
In a computer networking system having a server coupled to a plurality of clients, wherein each of said plurality of clients has access to a plurality of program procedures, accessed through said server, each said program procedure having a security protocol required for access, unique to each user of each of said plurality of clients, a method for unifying said security protocols for each user based on unique user credentials comprising the steps of: upon request to start a program procedure by said user, authenticating the identity of said user based on information unique to said user; generating a user handle associated with said user; notifying each of said security protocols of said user handle associated with said user; generating new user credentials for each of said security protocol; associating said new user credentials with said user handle associated with said user; mapping said user handle to said unique user's credentials for each program procedure; generating an alternate process; tagging said alternate process with said user handle associated with said user; upon request from said alternate process for access to an object accessed through said server, granting access to said object based on said new user credentials associated with said user handle.
Claim 3
Dependent Claim
18 words
The method according to claim 1 wherein said user handle associates with said user via a user identifier.
Claim 4
Dependent Claim
28 words
The method according to claim 2 wherein said new user credentials is based on the association of said user identifier, said user handle, and said unique user credentials.
Claim 5
Dependent Claim
16 words
The method according to claim 1 wherein said alternate process acts in behalf of said user.
Claim 6
Dependent Claim
184 words
In a computer system having a plurality of program procedures, accessed through a server, each said program procedure having a security protocol required for access, unique to each user of each of said plurality of program procedures, a method for unifying said security protocols for each user based on unique user credentials comprising the steps of: upon request to start a program procedure by said user, authenticating the identity of said user based on information unique to said user; generating a user handle associated with said user; notifying each of said security protocols of said user handle associated with said user; generating new user credentials for each of said security protocol; associating said new user credentials with said user handle associated with said user; mapping said user handle to said unique user's credentials for each program procedure; generating an alternate process; tagging said alternate process with said user handle associated with said user; upon request from said alternate process for access to an object accessed through said server, granting access to said object based on said new user credentials associated with said user handle.
Claim 7
Dependent Claim
184 words
In a computer system having a plurality of program procedures, accessed through a server, each said program procedure having a security protocol required for access, unique to each user of each of said plurality of program procedures, a method for unifying said security protocols for each user based on unique user credentials comprising the steps of: upon request to start a program procedure by said user, authenticating the identity of said user based on information unique to said user; generating a user handle associated with said user; notifying each of said security protocols of said user handle associated with said user; generating new user credentials for each of said security protocol; associating said new user credentials with said user handle associated with said user; mapping said user handle to said unique user's credentials for each program procedure; generating an alternate process; tagging said alternate process with said user handle associated with said user; upon request from said alternate process for access to an object accessed through said server, granting access to said object based on said new user credentials associated with said user handle.
Claim 8
Dependent Claim
18 words
The method according to claim 5 wherein said user handle associates with said user via a user identifier.
Claim 9
Dependent Claim
28 words
The method according to claim 6 wherein said new user credentials is based on the association of said user identifier, said user handle, and said unique user credentials.
Claim 10
Dependent Claim
16 words
The method according to claim 5 wherein said alternate process acts in behalf of said user.
Claim 11
Dependent Claim
220 words
In a computer system having a plurality of program procedures, accessed through a server, each said program procedure having a security protocol required for access, unique to each user of each of said plurality of program procedures, a security system for unifying said security protocols for each user based on unique user credentials comprising: means for authenticating the identity of said user based on information unique to said user; means, coupled to said authenticating means, for generating a user handle associated with said user; means, coupled to said generating means, for notifying each of said security protocols of said user handle associated with said user; means, coupled to said authenticating means, for generating new user credentials for each of said security protocol; means, coupled to said new user credentials generating means, for associating said new user credentials with said user handle associated with said user; means, coupled to said associating means, for mapping said user handle to said unique user's credentials for each program procedure; means, coupled to said mapping means, for generating an alternate process; means, coupled to said alternate process generating means, for tagging said alternate process with said user handle associated with said user; means, coupled to said tagging means, for granting access to said object based on said new user credentials associated with said user handle.
Claim 12
Dependent Claim
220 words
In a computer system having a plurality of program procedures, accessed through a server, each said program procedure having a security protocol required for access, unique to each user of each of said plurality of program procedures, a security system for unifying said security protocols for each user based on unique user credentials comprising: means for authenticating the identity of said user based on information unique to said user; means, coupled to said authenticating means, for generating a user handle associated with said user; means, coupled to said generating means, for notifying each of said security protocols of said user handle associated with said user; means, coupled to said authenticating means, for generating new user credentials for each of said security protocol; means, coupled to said new user credentials generating means, for associating said new user credentials with said user handle associated with said user; means, coupled to said associating means, for mapping said user handle to said unique user's credentials for each program procedure; means, coupled to said mapping means, for generating an alternate process; means, coupled to said alternate process generating means, for tagging said alternate process with said user handle associated with said user; means, coupled to said tagging means, for granting access to said object based on said new user credentials associated with said user handle.
Claim 13
Dependent Claim
18 words
The system according to claim 9 wherein said user handle associates with said user via a user identifier.
Claim 14
Dependent Claim
28 words
The system according to claim 10 wherein said new user credentials is based on the association of said user identifier, said user handle, and said unique user credentials.
Claim 15
Dependent Claim
16 words
The system according to claim 9 wherein said alternate process acts in behalf of said user.
Claim 16
Dependent Claim
26 words
The system according to claim 9 wherein said granting means acts upon request from said alternate process for access to an object accessed through said server.
Claim 17
Dependent Claim
204 words
In a computer networking system having a server coupled to a plurality of clients, wherein each of said plurality of clients has access to a plurality of program procedures accessed through said server, each said program procedure having a security protocol required for access, unique to each user of each of said plurality of clients, a method for unifying said security protocols for each user based on unique user credentials comprising the steps of: authenticating the identity of said user based on information unique to said user; generating a user handle associated with said user; notifying each of said security protocols of said user handle associated with said user; generating new user credentials for each of said security protocols; associating said new user credentials with said user handle associated with said user; mapping said user handle to said unique user's credentials for each program procedure; and providing access to a requested program to a user base upon the mapping of said user handle to said unique user's credentials, said step of providing access to a requested program further comprising the steps of: generating an alternate process; tagging said alternate process with said user handle associated with said user; and generating access to said object.
Claim 18
Dependent Claim
204 words
In a computer networking system having a server coupled to a plurality of clients, wherein each of said plurality of clients has access to a plurality of program procedures accessed through said server, each said program procedure having a security protocol required for access, unique to each user of each of said plurality of clients, a method for unifying said security protocols for each user based on unique user credentials comprising the steps of: authenticating the identity of said user based on information unique to said user; generating a user handle associated with said user; notifying each of said security protocols of said user handle associated with said user; generating new user credentials for each of said security protocols; associating said new user credentials with said user handle associated with said user; mapping said user handle to said unique user's credentials for each program procedure; and providing access to a requested program to a user base upon the mapping of said user handle to said unique user's credentials, said step of providing access to a requested program further comprising the steps of: generating an alternate process; tagging said alternate process with said user handle associated with said user; and generating access to said object.
Claim 19
Dependent Claim
18 words
The method according to claim 14 wherein said user handle associates with said user via a user identifier.
Claim 20
Dependent Claim
27 words
The method according to claim 15 wherein said user credentials are based on the association of said user identifier, said user handle, and said unique user credentials.
Claim 21
Dependent Claim
179 words
In a computer networking system having a server coupled to a plurality of clients, wherein each of said plurality of clients has access to a plurality of program procedures accessed through said server, each said program procedure having a security protocol required for access, unique to each user of each of said plurality of clients, a method for unifying said security protocols for each user based on unique user credentials comprising the steps of: authenticating the identity of said user based on information unique to said user; generating a user handle associated with said user; notifying each of said security protocols of said user handle associated with said user; generating new user credentials for each of said security protocols; associating said new user credentials with said user handle associated with said user; mapping said user handle to said unique user's credentials for each program procedure; and generating an alternate process based on the mapping of said user handle to said unique user's credentials for each program procedure, wherein said user handle associates with said user via a user identifier.
Claim 22
Dependent Claim
179 words
In a computer networking system having a server coupled to a plurality of clients, wherein each of said plurality of clients has access to a plurality of program procedures accessed through said server, each said program procedure having a security protocol required for access, unique to each user of each of said plurality of clients, a method for unifying said security protocols for each user based on unique user credentials comprising the steps of: authenticating the identity of said user based on information unique to said user; generating a user handle associated with said user; notifying each of said security protocols of said user handle associated with said user; generating new user credentials for each of said security protocols; associating said new user credentials with said user handle associated with said user; mapping said user handle to said unique user's credentials for each program procedure; and generating an alternate process based on the mapping of said user handle to said unique user's credentials for each program procedure, wherein said user handle associates with said user via a user identifier.
Claim 23
Dependent Claim
180 words
In a computer system having a plurality of program procedures, accessed through a server, each said program procedure having a security protocol required for access, unique to each user of each of said plurality of program procedures, a method for unifying said security protocols for each user based on unique user credentials comprising the steps of: authenticating the identity of said user based on information unique to said user; generating a user handle associated with said user; notifying each of said security protocols of said user handle associated with said user; generating new user credentials for each of said security protocol; associating said new user credentials with said user handle associated with said user; mapping said user handle to said unique user's credentials for each program procedure; and providing access to a requested program to a user based upon the mapping of said user handle to said unique user's credentials, wherein this step further comprises the steps of: generating an alternate process; tagging said alternate process with said user handle associated with said user; and granting access to said object.
Claim 24
Dependent Claim
180 words
In a computer system having a plurality of program procedures, accessed through a server, each said program procedure having a security protocol required for access, unique to each user of each of said plurality of program procedures, a method for unifying said security protocols for each user based on unique user credentials comprising the steps of: authenticating the identity of said user based on information unique to said user; generating a user handle associated with said user; notifying each of said security protocols of said user handle associated with said user; generating new user credentials for each of said security protocol; associating said new user credentials with said user handle associated with said user; mapping said user handle to said unique user's credentials for each program procedure; and providing access to a requested program to a user based upon the mapping of said user handle to said unique user's credentials, wherein this step further comprises the steps of: generating an alternate process; tagging said alternate process with said user handle associated with said user; and granting access to said object.
Claim 25
Dependent Claim
18 words
The method according to claim 18 wherein said user handle associates with said user via a user identifier.
Claim 26
Dependent Claim
28 words
The method according to claim 19 wherein said new user credentials is based on the association of said user identifier, said user handle, and said unique user credentials.
Claim 27
Dependent Claim
16 words
The method according to claim 18 wherein said alternate process acts in behalf of said user.
Claim 28
Dependent Claim
240 words
In a computer system having a plurality of program procedures, accessed through a server, each said program procedure having a security protocol required for access, unique to each user of each of said plurality of program procedures, a security system for unifying said security protocols for each user based on unique user credentials comprising: means for authenticating the identity of said user based on information unique to said user; means, coupled to said authenticating means, for generating a user handle associated with said user; means, coupled to said generating means, for notifying each of said security protocols of said user handle associated with said user; means, coupled to said authenticating means, for generating new user credentials for each of said security protocol; means, coupled to said new user credentials generating means, for associating said new user credentials with said user handle associated with said user; means, coupled to said associating means, for mapping said user handle to said unique user's credentials for each program procedure; and means for providing access to a program using selected results from said mapping of said user handle to said unique user's credentials, said means for providing access further comprising: means, coupled to said mapping means for generating an alternate process; means, coupled to said alternate process generating means, for tagging said alternate process with said user handle associated with said user; and means, coupled to said tagging means, for granting access to said object.
Claim 29
Dependent Claim
240 words
In a computer system having a plurality of program procedures, accessed through a server, each said program procedure having a security protocol required for access, unique to each user of each of said plurality of program procedures, a security system for unifying said security protocols for each user based on unique user credentials comprising: means for authenticating the identity of said user based on information unique to said user; means, coupled to said authenticating means, for generating a user handle associated with said user; means, coupled to said generating means, for notifying each of said security protocols of said user handle associated with said user; means, coupled to said authenticating means, for generating new user credentials for each of said security protocol; means, coupled to said new user credentials generating means, for associating said new user credentials with said user handle associated with said user; means, coupled to said associating means, for mapping said user handle to said unique user's credentials for each program procedure; and means for providing access to a program using selected results from said mapping of said user handle to said unique user's credentials, said means for providing access further comprising: means, coupled to said mapping means for generating an alternate process; means, coupled to said alternate process generating means, for tagging said alternate process with said user handle associated with said user; and means, coupled to said tagging means, for granting access to said object.
Claim 30
Dependent Claim
18 words
The system according to claim 22 wherein said user handle associates with said user via a user identifier.
Claim 31
Dependent Claim
28 words
The system according to claim 23 wherein said new user credentials are based on the association of said user identifier, said user handle, and said unique user credentials.
Claim 32
Dependent Claim
16 words
The system according to claim 22 wherein said alternate process acts in behalf of said user.
Claim 33
Dependent Claim
26 words
The system according to claim 22 wherein said granting means acts on request from said alternate process for access to an object accessed through said server.
References Cited (Backward Citations)
US4310720A
Cited
US4498132A
Cited
US4498131A
Cited
US4525780A
Cited
US4731734A
Cited
US5202997A
Cited
US4742450A
Cited
US4951249A
Cited
US5018096A
Cited
US5060263A
Cited
US5321841A
Cited
US5187790A
Cited
JPH03192457A
Cited
US5263158A
Cited
US5339403A
Cited
US5239648A
Cited
US5261102A
Cited
US5239583A
Cited
JPH04342055A
Cited
US5305456A
Cited
US5276901A
Cited
US5280581A
Cited
US5241594A
Cited
US5235642A
Cited
US5287519A
Cited
US5450593A
Cited
US5359660A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2000-02-18 | 2000-08-19 | 2001-02-18 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2004-02-18 | 2004-08-19 | 2005-02-18 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2008-02-18 | 2008-08-19 | 2009-02-18 | $7700.00 | Window Closed / Lapsed |