Security apparatus and method for a data communications system

Claim 2

A data communications system, comprising: a remote associated with one of a plurality of users, the remote operable to communicate data; a host coupled to the remote and having a memory, the host operable to communicate data with the remote; a plurality of data repositories within the memory of the host, each data repository associated with a particular user; and a security system coupled to the remote and the host, the security system operable to spawn an executable program in response to the remote requesting access to the host, the executable program having selected access to the memory of the host, the executable program operable to interact with the remote to provide the selected access, the selected access comprising access to the data repository associated with one of the plurality of users.

Claim 3

The system of claim 1, wherein the security system is operable to establish a separate executable program each time one of a plurality of remotes requests access to the host, each executable program having an associated remote, each executable program having selected access to the memory of the host.

Claim 4

The system of claim 1, wherein the security system spawns the executable program according to access information associated with the one of the plurality of users, the access information specifying the selected access.

Claim 5

The system of claim 3, wherein the access information comprises a mailbox identifier associated with the one of the plurality of users.

Claim 6

The system of claim 1, wherein the security system is distributed to operate on a plurality of different processing platforms.

Claim 7

The system of claim 1, wherein the security system further comprises: a communication module operable to receive communications from the remote and to transmit an access signal in response; and a mailbox module operable to spawn the executable program in response to the access signal.

Claim 8

The system of claim 6, wherein the mailbox module spawns the executable program according to access information associated with the one of the plurality of users, the access information specifying the selected access.

Claim 9

The system of claim 6, wherein the communications module comprises a protocol converter operable to receive first data from the remote in a first protocol and translate the first data into second data in a second protocol, the protocol converter operable to communicate the second data to the host in the second protocol.

Claim 10

A security system for providing selected access to a memory of a host, comprising: a communications module coupled to a remote and the host, the remote being associated with one of a plurality of users, the communications module operable to receive communications from the remote and to transmit an access signal in response; a control module coupled to the communications module, the control module operable to receive the access signal and, in response, to approve selected access to the memory of the host, the memory of the host comprising a plurality of data repositories, each data repository associated with a particular user, the control module operable to transmit a spawn signal in response to approving the selected access; and a mailbox module coupled to the control module, the mailbox module operable to receive the spawn signal and to spawn an executable program in response, the executable program having the selected access to the memory of the host and operable to interact with the remote to provide the selected access, the selected access comprising access to the data repository associated with the one of the plurality of users.

Claim 11

A security system for providing selected access to a memory of a host, comprising: a communications module coupled to a remote and the host, the remote being associated with one of a plurality of users, the communications module operable to receive communications from the remote and to transmit an access signal in response; a control module coupled to the communications module, the control module operable to receive the access signal and, in response, to approve selected access to the memory of the host, the memory of the host comprising a plurality of data repositories, each data repository associated with a particular user, the control module operable to transmit a spawn signal in response to approving the selected access; and a mailbox module coupled to the control module, the mailbox module operable to receive the spawn signal and to spawn an executable program in response, the executable program having the selected access to the memory of the host and operable to interact with the remote to provide the selected access, the selected access comprising access to the data repository associated with the one of the plurality of users.

Claim 12

The system of claim 9, wherein the security system is operable to establish a separate executable program each time one of a plurality of remotes requests access to the host, each executable program having an associated remote, each executable program having selected access to the memory of the host.

Claim 13

The system of claim 9, wherein the mailbox module spawns the executable program according to access information associated with the one of the plurality of users, the access information specifying the selected access.

Claim 14

The system of claim 9, further comprising an exits module coupled to the control module and operable to modify the selected access in response to commands communicated from the remote.

Claim 15

The system of claim 9, further comprising a remote site definitions file coupled to the control module and associated with the remote, the remote site definitions file operable to specify communications parameters for establishing communications between the remote and the host.

Claim 16

The system of claim 9, further comprising: an auto connect definitions file specifying communications to be established at predetermined times between the security system and the remote; and an auto connect module coupled to the control module and operable to initiate communications between the security system and the remote at the predetermined times specified in the auto connect definitions file.

Claim 17

The system of claim 14, wherein the communications between the security system and the remote comprise a command operable to cause the remote to execute a program.

Claim 18

The system of claim 14, wherein the communications between the security system and the remote comprise information operable to override remote-specific information associated with the remote.

Claim 19

The system of claim 9, further comprising an exits module coupled to the control module and operable to modify parameters associated with a remote command if the command is incompatible with the selected access.

Claim 20

The system of claim 9, further comprising an exits module coupled to the control module and operable to determine a reason to deny the one of the plurality of users the selected access.

Claim 21

The system of claim 9, further comprising an exits module coupled to the control module and operable to invoke an exit selected from the group consisting of: an exit invoked in response to initialization of the system; an exit invoked in response to a communications session being established with the remote; an exit invoked in response to receiving data from the remote; an exit invoked in response to the addition of data to the memory of the host; an exit invoked in response to communicating data to the remote; an exit invoked during shutdown of the system; and an exit invoked in response to a request to execute an operation.

Claim 24

The method of claim 20, wherein a separate executable program is established each time access by one of a plurality of remotes is approved, each executable program having an associated remote, each executable program having selected access to the memory of the host.

Claim 25

The method of claim 20, wherein spawning the executable program determines the selected access to the memory of the host, the selected access specified by access information associated with the one of the plurality of users.

Claim 26

The method of claim 20, wherein receiving the communications from the remote at the host comprises: receiving first data from the remote in a first protocol; translating the first data into second data in a second protocol using a protocol converter; and communicating the second data to the host in the second protocol.

Claim 27

The method of claim 20, further comprising: establishing communications between the remote and a communications module coupled to the host in response to receiving the communications from the remote; spawning a child communications module to manage communications with the remote; and reporting the communications from the remote to a control module, the control module operable to approve the selected access.

Claim 30

The method of claim 25, further comprising: loading the identities of the non-control modules into a status table.

Claim 31

The method of claim 25, wherein the non-control modules comprise a communications module and a mailbox module.