US5745570A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Object-oriented programming environment that provides object encapsulation via encryption
Assignee: International Business Machines Corp
•
Filing: 1996-04-15
•
Granted: 1998-04-28
•
Expires: 2016-04-15
Abstract
Abstract This invention relates in general to object-oriented encapsulated enforcement mechanisms. In particular, a hardware independent object encapsulation enforcement mechanism is disclosed herein. The object encapsulation enforcement mechanism of the present invention uses encryption technology to ensure that data controlled by an object is accessed solely through use of the object's method programs. When an object is instantiated, the virtual address used to refer to the object is encrypted before it is returned to the instantiating application program. When access to a previously instantiated object is requested, the object encapsulation enforcement mechanism decrypts the presented object address and passes the address to the identified method program, thereby ensuring that only object method programs have access to data controlled by the object.
Inventors
- 👤 Erik Edward Voldal
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-07 18:38
CPC Classifications
G; G06; G06F; G06F8/00; G06F9/00; G06F9/06; G06F9/46; G06F9/468; G06F12/00; G06F12/14; G06F12/1408; G06F12/1458; G06F12/1466; G06F12/1475; G06F9/44; G06F9/448; G06F9/4488; G06F9/449
Claims Analysis
Total Claims: 30
Claim 1
Independent Claim
96 words
A computer system, said computer system comprising: a central processing unit; a bus; computer system memory connected to said central processing unit via said bus; application programs, said application programs being stored in said computer system memory for execution on said central processing unit; and an object encapsulation enforcement mechanism, said object encapsulation enforcement mechanism being stored in said computer system memory for execution on said central processing unit, said object encapsulation enforcement mechanism enforcing access to server objects by said application programs through encryption of object addresses that are used to address said server objects.
Claim 2
Dependent Claim
96 words
A computer system, said computer system comprising: a central processing unit; a bus; computer system memory connected to said central processing unit via said bus; application programs, said application programs being stored in said computer system memory for execution on said central processing unit; and an object encapsulation enforcement mechanism, said object encapsulation enforcement mechanism being stored in said computer system memory for execution on said central processing unit, said object encapsulation enforcement mechanism enforcing access to server objects by said application programs through encryption of object addresses that are used to address said server objects.
Claim 3
Dependent Claim
31 words
The computer system of claim 1 wherein said object encapsulation enforcement mechanism comprises a storage management mechanism that causes said object addresses to be encrypted upon instantiation of said server objects.
Claim 4
Dependent Claim
35 words
The computer system of claim 1 wherein said object encapsulation enforcement mechanism comprises a method call manager that causes said object addresses to be decrypted upon access to said server objects by said application programs.
Claim 5
Dependent Claim
78 words
A computer system, said computer system comprising: a central processing unit; a bus; computer system memory connected to said central processing unit via said bus; and a storage management mechanism, said storage management mechanism being stored in said computer system memory for execution on said central processing unit, said storage management mechanism being used to allocate computer system memory for at least one instantiated object and to cause encryption of an object address that refers to said object.
Claim 6
Dependent Claim
78 words
A computer system, said computer system comprising: a central processing unit; a bus; computer system memory connected to said central processing unit via said bus; and a storage management mechanism, said storage management mechanism being stored in said computer system memory for execution on said central processing unit, said storage management mechanism being used to allocate computer system memory for at least one instantiated object and to cause encryption of an object address that refers to said object.
Claim 7
Dependent Claim
76 words
A computer system, said computer system comprising: a central processing unit; a bus; computer system memory connected to said central processing unit via said bus; and a method call manager, said method call manager being stored in said computer system memory for execution on said central processing unit, said method call manager being used to decrypt at least one encrypted object address of a server object when access by at least one application program is requested.
Claim 8
Dependent Claim
76 words
A computer system, said computer system comprising: a central processing unit; a bus; computer system memory connected to said central processing unit via said bus; and a method call manager, said method call manager being stored in said computer system memory for execution on said central processing unit, said method call manager being used to decrypt at least one encrypted object address of a server object when access by at least one application program is requested.
Claim 9
Dependent Claim
189 words
A network of computer systems, said network comprising: a first computer system, said first computer system comprising, a first central processing unit; a first bus; first computer system memory connected to said first central processing unit via said first bus; a storage management mechanism, said storage management mechanism being stored in said first computer system memory for execution on said first central processing unit, said storage management mechanism being used to allocate computer system memory for at least one instantiated object and to cause encryption of an object address that refers to said object; a second computer system, said second computer system being connected to said first computer system, said second computer system comprising, a second central processing unit; a second bus; second computer system memory connected to said central processing unit via said second bus; and a method call manager, said method call manager being stored in said second computer system memory for execution on said second central processing unit, said method call manager being used to decrypt said encrypted object address of said at least one object when access by at least one application program is requested.
Claim 10
Dependent Claim
189 words
A network of computer systems, said network comprising: a first computer system, said first computer system comprising, a first central processing unit; a first bus; first computer system memory connected to said first central processing unit via said first bus; a storage management mechanism, said storage management mechanism being stored in said first computer system memory for execution on said first central processing unit, said storage management mechanism being used to allocate computer system memory for at least one instantiated object and to cause encryption of an object address that refers to said object; a second computer system, said second computer system being connected to said first computer system, said second computer system comprising, a second central processing unit; a second bus; second computer system memory connected to said central processing unit via said second bus; and a method call manager, said method call manager being stored in said second computer system memory for execution on said second central processing unit, said method call manager being used to decrypt said encrypted object address of said at least one object when access by at least one application program is requested.
Claim 11
Dependent Claim
89 words
A computer implemented method for enforcing object encapsulation, said method comprising the steps of: requesting instantiation of an object, said instantiation being requested by an application program; allocating computer system memory for said object; encrypting an object address that refers to said object; returning said encrypted object address to said application program; requesting access to said object via a method program of said object; decrypting said encrypted object address into a decrypted object address and providing said decrypted object address to said method program; and executing said method program.
Claim 12
Dependent Claim
89 words
A computer implemented method for enforcing object encapsulation, said method comprising the steps of: requesting instantiation of an object, said instantiation being requested by an application program; allocating computer system memory for said object; encrypting an object address that refers to said object; returning said encrypted object address to said application program; requesting access to said object via a method program of said object; decrypting said encrypted object address into a decrypted object address and providing said decrypted object address to said method program; and executing said method program.
Claim 13
Dependent Claim
53 words
A computer implemented method for enforcing object encapsulation, said method comprising the steps of: requesting instantiation of an object, said instantiation being requested by an application program; allocating computer system memory for said object; encrypting an object address that refers to said object; and returning said encrypted object address to said application program.
Claim 14
Dependent Claim
53 words
A computer implemented method for enforcing object encapsulation, said method comprising the steps of: requesting instantiation of an object, said instantiation being requested by an application program; allocating computer system memory for said object; encrypting an object address that refers to said object; and returning said encrypted object address to said application program.
Claim 15
Dependent Claim
52 words
A computer implemented method for enforcing object encapsulation, said method comprising the steps of: requesting access to an object's data via a method program of said object; decrypting an encrypted object address into a decrypted object address and providing said decrypted object address to said method program; and executing said method program.
Claim 16
Dependent Claim
52 words
A computer implemented method for enforcing object encapsulation, said method comprising the steps of: requesting access to an object's data via a method program of said object; decrypting an encrypted object address into a decrypted object address and providing said decrypted object address to said method program; and executing said method program.
Claim 17
Dependent Claim
48 words
A program product, said program product comprising: an object encapsulation enforcement mechanism, said object encapsulation enforcement mechanism enforcing access to server objects by application programs through encryption of object addresses that are used to address said server objects; and signal bearing media bearing said object encapsulation enforcement mechanism.
Claim 18
Dependent Claim
48 words
A program product, said program product comprising: an object encapsulation enforcement mechanism, said object encapsulation enforcement mechanism enforcing access to server objects by application programs through encryption of object addresses that are used to address said server objects; and signal bearing media bearing said object encapsulation enforcement mechanism.
Claim 19
Dependent Claim
31 words
The program product of claim 10 wherein said object encapsulation enforcement mechanism comprises a storage management mechanism that causes said object addresses to be encrypted upon instantiation of said server objects.
Claim 20
Dependent Claim
35 words
The program product of claim 10 wherein said object encapsulation enforcement mechanism comprises a method call manager that causes said object addresses to be decrypted upon access to said server objects by said application programs.
Claim 21
Dependent Claim
15 words
The program product of claim 10 wherein said signal bearing media is transmission type media.
Claim 22
Dependent Claim
14 words
The program product of claim 10 wherein said signal bearing media is recordable media.
Claim 23
Dependent Claim
50 words
A program product, said program product comprising: a storage management mechanism, said storage management mechanism being used to allocate computer system memory for at least one instantiated object and to cause encryption of an object address that refers to said object; and signal bearing media bearing said storage management mechanism.
Claim 24
Dependent Claim
50 words
A program product, said program product comprising: a storage management mechanism, said storage management mechanism being used to allocate computer system memory for at least one instantiated object and to cause encryption of an object address that refers to said object; and signal bearing media bearing said storage management mechanism.
Claim 25
Dependent Claim
15 words
The program product of claim 15 wherein said signal bearing media is transmission type media.
Claim 26
Dependent Claim
14 words
The program product of claim 15 wherein said signal bearing media is recordable media.
Claim 27
Dependent Claim
48 words
A program product, said program product comprising: a method call manager, said method call manager being used to decrypt at least one encrypted object address of a server object when access by at least one application program is requested; and signal bearing media bearing said method call manager.
Claim 28
Dependent Claim
48 words
A program product, said program product comprising: a method call manager, said method call manager being used to decrypt at least one encrypted object address of a server object when access by at least one application program is requested; and signal bearing media bearing said method call manager.
Claim 29
Dependent Claim
15 words
The program product of claim 18 wherein said signal bearing media is transmission type media.
Claim 30
Dependent Claim
14 words
The program product of claim 18 wherein said signal bearing media is recordable media.
References Cited (Backward Citations)
US4120030A
Cited
US5051898A
Cited
US4953209A
Cited
US4941175A
Cited
US5075847A
Cited
US5301284A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-04-27 | 2001-10-27 | 2002-04-28 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-04-27 | 2005-10-27 | 2006-04-28 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-04-27 | 2009-10-27 | 2010-04-28 | $7700.00 | Window Closed / Lapsed |