Patent US2196028A successfully refreshed from Google Patents.
Patent US5745570A successfully refreshed from Google Patents.
← Back to Patent Explorer
US5745570A Expired / Lapsed US ⏱️ 0.0 years remaining

Object-oriented programming environment that provides object encapsulation via encryption

Assignee: International Business Machines Corp
•
Filing: 1996-04-15
•
Granted: 1998-04-28
•
Expires: 2016-04-15
📄 Original PDF 🌐 Google Patents 🔄 Sync Now

Abstract

Abstract This invention relates in general to object-oriented encapsulated enforcement mechanisms. In particular, a hardware independent object encapsulation enforcement mechanism is disclosed herein. The object encapsulation enforcement mechanism of the present invention uses encryption technology to ensure that data controlled by an object is accessed solely through use of the object's method programs. When an object is instantiated, the virtual address used to refer to the object is encrypted before it is returned to the instantiating application program. When access to a previously instantiated object is requested, the object encapsulation enforcement mechanism decrypts the presented object address and passes the address to the identified method program, thereby ensuring that only object method programs have access to data controlled by the object.

Inventors

  • 👤 Erik Edward Voldal

Bibliographic Details

Application Number —
Jurisdiction US
Data Source google_patents
Last Synchronized 2026-11-07 19:08
CPC Classifications
G; G06; G06F; G06F8/00; G06F9/00; G06F9/06; G06F9/46; G06F9/468; G06F12/00; G06F12/14; G06F12/1408; G06F12/1458; G06F12/1466; G06F12/1475; G06F9/44; G06F9/448; G06F9/4488; G06F9/449

Claims Analysis

Total Claims: 30
Claim 1
Independent Claim 96 words
A computer system, said computer system comprising: a central processing unit; a bus; computer system memory connected to said central processing unit via said bus; application programs, said application programs being stored in said computer system memory for execution on said central processing unit; and an object encapsulation enforcement mechanism, said object encapsulation enforcement mechanism being stored in said computer system memory for execution on said central processing unit, said object encapsulation enforcement mechanism enforcing access to server objects by said application programs through encryption of object addresses that are used to address said server objects.
Claim 2
Dependent Claim 96 words
A computer system, said computer system comprising: a central processing unit; a bus; computer system memory connected to said central processing unit via said bus; application programs, said application programs being stored in said computer system memory for execution on said central processing unit; and an object encapsulation enforcement mechanism, said object encapsulation enforcement mechanism being stored in said computer system memory for execution on said central processing unit, said object encapsulation enforcement mechanism enforcing access to server objects by said application programs through encryption of object addresses that are used to address said server objects.
Claim 3
Dependent Claim 31 words
The computer system of claim 1 wherein said object encapsulation enforcement mechanism comprises a storage management mechanism that causes said object addresses to be encrypted upon instantiation of said server objects.
Claim 4
Dependent Claim 35 words
The computer system of claim 1 wherein said object encapsulation enforcement mechanism comprises a method call manager that causes said object addresses to be decrypted upon access to said server objects by said application programs.
Claim 5
Dependent Claim 78 words
A computer system, said computer system comprising: a central processing unit; a bus; computer system memory connected to said central processing unit via said bus; and a storage management mechanism, said storage management mechanism being stored in said computer system memory for execution on said central processing unit, said storage management mechanism being used to allocate computer system memory for at least one instantiated object and to cause encryption of an object address that refers to said object.
Claim 6
Dependent Claim 78 words
A computer system, said computer system comprising: a central processing unit; a bus; computer system memory connected to said central processing unit via said bus; and a storage management mechanism, said storage management mechanism being stored in said computer system memory for execution on said central processing unit, said storage management mechanism being used to allocate computer system memory for at least one instantiated object and to cause encryption of an object address that refers to said object.
Claim 7
Dependent Claim 76 words
A computer system, said computer system comprising: a central processing unit; a bus; computer system memory connected to said central processing unit via said bus; and a method call manager, said method call manager being stored in said computer system memory for execution on said central processing unit, said method call manager being used to decrypt at least one encrypted object address of a server object when access by at least one application program is requested.
Claim 8
Dependent Claim 76 words
A computer system, said computer system comprising: a central processing unit; a bus; computer system memory connected to said central processing unit via said bus; and a method call manager, said method call manager being stored in said computer system memory for execution on said central processing unit, said method call manager being used to decrypt at least one encrypted object address of a server object when access by at least one application program is requested.
Claim 9
Dependent Claim 189 words
A network of computer systems, said network comprising: a first computer system, said first computer system comprising, a first central processing unit; a first bus; first computer system memory connected to said first central processing unit via said first bus; a storage management mechanism, said storage management mechanism being stored in said first computer system memory for execution on said first central processing unit, said storage management mechanism being used to allocate computer system memory for at least one instantiated object and to cause encryption of an object address that refers to said object; a second computer system, said second computer system being connected to said first computer system, said second computer system comprising, a second central processing unit; a second bus; second computer system memory connected to said central processing unit via said second bus; and a method call manager, said method call manager being stored in said second computer system memory for execution on said second central processing unit, said method call manager being used to decrypt said encrypted object address of said at least one object when access by at least one application program is requested.
Claim 10
Dependent Claim 189 words
A network of computer systems, said network comprising: a first computer system, said first computer system comprising, a first central processing unit; a first bus; first computer system memory connected to said first central processing unit via said first bus; a storage management mechanism, said storage management mechanism being stored in said first computer system memory for execution on said first central processing unit, said storage management mechanism being used to allocate computer system memory for at least one instantiated object and to cause encryption of an object address that refers to said object; a second computer system, said second computer system being connected to said first computer system, said second computer system comprising, a second central processing unit; a second bus; second computer system memory connected to said central processing unit via said second bus; and a method call manager, said method call manager being stored in said second computer system memory for execution on said second central processing unit, said method call manager being used to decrypt said encrypted object address of said at least one object when access by at least one application program is requested.
Claim 11
Dependent Claim 89 words
A computer implemented method for enforcing object encapsulation, said method comprising the steps of: requesting instantiation of an object, said instantiation being requested by an application program; allocating computer system memory for said object; encrypting an object address that refers to said object; returning said encrypted object address to said application program; requesting access to said object via a method program of said object; decrypting said encrypted object address into a decrypted object address and providing said decrypted object address to said method program; and executing said method program.
Claim 12
Dependent Claim 89 words
A computer implemented method for enforcing object encapsulation, said method comprising the steps of: requesting instantiation of an object, said instantiation being requested by an application program; allocating computer system memory for said object; encrypting an object address that refers to said object; returning said encrypted object address to said application program; requesting access to said object via a method program of said object; decrypting said encrypted object address into a decrypted object address and providing said decrypted object address to said method program; and executing said method program.
Claim 13
Dependent Claim 53 words
A computer implemented method for enforcing object encapsulation, said method comprising the steps of: requesting instantiation of an object, said instantiation being requested by an application program; allocating computer system memory for said object; encrypting an object address that refers to said object; and returning said encrypted object address to said application program.
Claim 14
Dependent Claim 53 words
A computer implemented method for enforcing object encapsulation, said method comprising the steps of: requesting instantiation of an object, said instantiation being requested by an application program; allocating computer system memory for said object; encrypting an object address that refers to said object; and returning said encrypted object address to said application program.
Claim 15
Dependent Claim 52 words
A computer implemented method for enforcing object encapsulation, said method comprising the steps of: requesting access to an object's data via a method program of said object; decrypting an encrypted object address into a decrypted object address and providing said decrypted object address to said method program; and executing said method program.
Claim 16
Dependent Claim 52 words
A computer implemented method for enforcing object encapsulation, said method comprising the steps of: requesting access to an object's data via a method program of said object; decrypting an encrypted object address into a decrypted object address and providing said decrypted object address to said method program; and executing said method program.
Claim 17
Dependent Claim 48 words
A program product, said program product comprising: an object encapsulation enforcement mechanism, said object encapsulation enforcement mechanism enforcing access to server objects by application programs through encryption of object addresses that are used to address said server objects; and signal bearing media bearing said object encapsulation enforcement mechanism.
Claim 18
Dependent Claim 48 words
A program product, said program product comprising: an object encapsulation enforcement mechanism, said object encapsulation enforcement mechanism enforcing access to server objects by application programs through encryption of object addresses that are used to address said server objects; and signal bearing media bearing said object encapsulation enforcement mechanism.
Claim 19
Dependent Claim 31 words
The program product of claim 10 wherein said object encapsulation enforcement mechanism comprises a storage management mechanism that causes said object addresses to be encrypted upon instantiation of said server objects.
Claim 20
Dependent Claim 35 words
The program product of claim 10 wherein said object encapsulation enforcement mechanism comprises a method call manager that causes said object addresses to be decrypted upon access to said server objects by said application programs.
Claim 21
Dependent Claim 15 words
The program product of claim 10 wherein said signal bearing media is transmission type media.
Claim 22
Dependent Claim 14 words
The program product of claim 10 wherein said signal bearing media is recordable media.
Claim 23
Dependent Claim 50 words
A program product, said program product comprising: a storage management mechanism, said storage management mechanism being used to allocate computer system memory for at least one instantiated object and to cause encryption of an object address that refers to said object; and signal bearing media bearing said storage management mechanism.
Claim 24
Dependent Claim 50 words
A program product, said program product comprising: a storage management mechanism, said storage management mechanism being used to allocate computer system memory for at least one instantiated object and to cause encryption of an object address that refers to said object; and signal bearing media bearing said storage management mechanism.
Claim 25
Dependent Claim 15 words
The program product of claim 15 wherein said signal bearing media is transmission type media.
Claim 26
Dependent Claim 14 words
The program product of claim 15 wherein said signal bearing media is recordable media.
Claim 27
Dependent Claim 48 words
A program product, said program product comprising: a method call manager, said method call manager being used to decrypt at least one encrypted object address of a server object when access by at least one application program is requested; and signal bearing media bearing said method call manager.
Claim 28
Dependent Claim 48 words
A program product, said program product comprising: a method call manager, said method call manager being used to decrypt at least one encrypted object address of a server object when access by at least one application program is requested; and signal bearing media bearing said method call manager.
Claim 29
Dependent Claim 15 words
The program product of claim 18 wherein said signal bearing media is transmission type media.
Claim 30
Dependent Claim 14 words
The program product of claim 18 wherein said signal bearing media is recordable media.

References Cited (Backward Citations)

US4120030A Cited
US5051898A Cited
US4953209A Cited
US4941175A Cited
US5075847A Cited
US5301284A Cited

USPTO Annuity & Maintenance Windows

Annuity Stage Window Opens Payment Deadline Surcharge Period Until Estimated Fee Status
3.5 Years (Year 4) 2001-04-27 2001-10-27 2002-04-28 $2000.00 Window Closed / Lapsed
7.5 Years (Year 8) 2005-04-27 2005-10-27 2006-04-28 $3760.00 Window Closed / Lapsed
11.5 Years (Year 12) 2009-04-27 2009-10-27 2010-04-28 $7700.00 Window Closed / Lapsed

Assigned Categories & Tags

No categories assigned to this patent yet.

Assign Category Tag