Patent US5765153A successfully refreshed from Google Patents.
US5765153A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Information handling system, method, and article of manufacture including object system authorization and registration
Assignee: International Business Machines Corp
•
Filing: 1996-01-03
•
Granted: 1998-06-09
•
Expires: 2016-01-03
Abstract
Abstract A system, method and article of manufacture, for improving object security in distributed object systems, in an information handling system employing object oriented technology, includes one or more processors, a storage system, a system bus, a display sub-system controlling a display device, a cursor control device, an I/O controller for controlling I/O devices, all connected by system bus an operating system such as the OS/2* operating system program (OS/2 is a registered trademark of International Business Machines Corporation), one or more application programs for executing user tasks and an object oriented control program, such as, DSOM Objects program, which is a commercially available product of International Business Machines Corporation, the object oriented control program including a system authorization policy (SAP) object, a system authorization oracle (SAO) object, and a system registration object (SRO). The SAP object encapsulates management of a resource authorization policy. It may also be used to retrieve security attributes of objects in order to perform access checking. An object's security attribute includes the access control list (ACL) governing access to the object. The SAP object is also used to retrieve and manipulate user capabilities in an environment that is capability based for access authorization. A user capability enlists the object that the user has access to, along with the corresponding access types or permissions. A capability is the transpose of an access control list (ACL) in the global access matrix modeling user access to protected objects.
Inventors
- 👤 Messaoud Benantar
- 👤 George Robert Blakley, III
- 👤 Anthony Joseph Nadalin
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-29 13:33
CPC Classifications
G; G06; G06F; G06F9/00; G06F9/06; G06F9/46; G06F9/468; G06F21/00; G06F21/60; G06F21/604; G06F12/00; G06F12/14; G06F12/1458; G06F12/1483
Claims Analysis
Total Claims: 19
Claim 1
Independent Claim
75 words
A method for improving system authorization and registration in an information handling system employing object oriented technology, comprising the steps of: first building a system authorization policy object which encapsulates management of a resource authorization policy to an object oriented control program; second building a system authorization oracle object which encapsulates the process of the decision making at access checking time; and third building a system registration object which encapsulates management of a subject registry.
Claim 2
Independent Claim
75 words
A method for improving system authorization and registration in an information handling system employing object oriented technology, comprising the steps of: first building a system authorization policy object which encapsulates management of a resource authorization policy to an object oriented control program; second building a system authorization oracle object which encapsulates the process of the decision making at access checking time; and third building a system registration object which encapsulates management of a subject registry.
Claim 3
Dependent Claim
27 words
A method according to claim 1, wherein said first building step further comprises the step of: retrieving security attributes of objects in order to perform access checking.
Claim 4
Dependent Claim
42 words
A method according to claim 1, wherein the second building step further comprises the step of: isolating the system authorization oracle object from the system authorization policy object to make it independent from underlying policy registry implementation mechanisms and enforce system integrity.
Claim 5
Dependent Claim
27 words
A method according to claim 1, wherein the third building step further comprises the step of: managing subject capability for environments that are capability based for authorization.
Claim 6
Dependent Claim
65 words
A computer readable medium comprising: means for first building a system authorization policy object which encapsulates management of a resource authorization policy to an object oriented control program; means for second building a system authorization oracle object which encapsulates the process of the decision making at access checking time; and means for third building a system registration object which encapsulates management of a subject registry.
Claim 7
Dependent Claim
65 words
A computer readable medium comprising: means for first building a system authorization policy object which encapsulates management of a resource authorization policy to an object oriented control program; means for second building a system authorization oracle object which encapsulates the process of the decision making at access checking time; and means for third building a system registration object which encapsulates management of a subject registry.
Claim 8
Dependent Claim
27 words
A computer readable medium, according to claim 5, wherein said searching means further comprises: means for retrieving security attributes of objects in order to perform access checking.
Claim 9
Dependent Claim
38 words
A computer readable medium, according to claim 5, further comprising: means for isolating the system authorization oracle object from the system authorization policy object to make it independent from underlying policy registry implementation mechanisms and enforce system integrity.
Claim 10
Dependent Claim
23 words
A computer readable medium, according to claim 5, further comprising: means for managing subject capability for environments that are capability based for authorization.
Claim 11
Independent Claim
122 words
A system, for improving object security, in an information handling system employing object oriented technology, comprising: one or more processors; a storage system; one or more I/O controllers for controlling I/O devices; a system bus interconnecting the processors, the storage system, and the I/O controllers; a system control program controlling operation of the system; one or more application programs for executing user tasks; and an object oriented control program, the object oriented control program comprising a system authorization policy object which encapsulates management of a resource authorization policy to the object oriented control program; a system authorization oracle object which encapsulates a process of decision making at access checking time; and a system registration object which encapsulates management of a subject registry.
Claim 12
Independent Claim
122 words
A system, for improving object security, in an information handling system employing object oriented technology, comprising: one or more processors; a storage system; one or more I/O controllers for controlling I/O devices; a system bus interconnecting the processors, the storage system, and the I/O controllers; a system control program controlling operation of the system; one or more application programs for executing user tasks; and an object oriented control program, the object oriented control program comprising a system authorization policy object which encapsulates management of a resource authorization policy to the object oriented control program; a system authorization oracle object which encapsulates a process of decision making at access checking time; and a system registration object which encapsulates management of a subject registry.
Claim 13
Dependent Claim
35 words
A system, according to claim 9, further comprising: means for first building the system authorization policy object; means for second building the system authorization oracle object; and means for third building the system registration object.
Claim 14
Dependent Claim
21 words
A system, according to claim 9, further comprising: means for retrieving security attributes of objects in order to perform access checking.
Claim 15
Dependent Claim
36 words
A system, according to claim 9, further comprising: means for isolating the system authorization oracle object from the system authorization policy object to make it independent from underlying policy registry implementation mechanisms and enforce system integrity.
Claim 16
Dependent Claim
21 words
A system, according to claim 9, further comprising: means for managing subject capability for environments that are capability based for authorization.
Claim 17
Dependent Claim
17 words
A system, according to claim 9, further comprising: a cursor control device connected to an I/O controller.
Claim 18
Dependent Claim
25 words
A system, according to claim 9, further comprising: a display subsystem, connected to the system bus, for displaying visual representations of objects and other information.
Claim 19
Dependent Claim
25 words
A system, according to claim 9, further comprising: a display subsystem, connected to an I/O controller, for displaying visual representations of objects and other information.
References Cited (Backward Citations)
US4525780A
Cited
US5404506A
Cited
US5047925A
Cited
US5008786A
Cited
US4814971A
Cited
US4853842A
Cited
US5043871A
Cited
US5335323A
Cited
US5421015A
Cited
US5369778A
Cited
US5421012A
Cited
US5016162A
Cited
US5185885A
Cited
US5343554A
Cited
US4989132A
Cited
US5265221A
Cited
US5111413A
Cited
US5261052A
Cited
US5325524A
Cited
US5185736A
Cited
US5226172A
Cited
US5095480A
Cited
US5321841A
Cited
US5598562A
Cited
US5297283A
Cited
US5136712A
Cited
US5163148A
Cited
US5093914A
Cited
US5075845A
Cited
US5263165A
Cited
US5263158A
Cited
US5263157A
Cited
US5297279A
Cited
US5437027A
Cited
US5280610A
Cited
US5341478A
Cited
US5412774A
Cited
US5287453A
Cited
US5295256A
Cited
US5301286A
Cited
US5212787A
Cited
US5303375A
Cited
US5276872A
Cited
US5291283A
Cited
US5301316A
Cited
US5283830A
Cited
US5363313A
Cited
US5414840A
Cited
US5404508A
Cited
US5408649A
Cited
US5404529A
Cited
US5379432A
Cited
US5369702A
Cited
US5485455A
Cited
US5491694A
Cited
US5521910A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-06-08 | 2001-12-08 | 2002-06-09 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-06-08 | 2005-12-08 | 2006-06-09 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-06-08 | 2009-12-08 | 2010-06-09 | $7700.00 | Window Closed / Lapsed |