US5802276A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Information handling system, method, and article of manufacture including a vault object for encapsulation of object security credentials
Assignee: PHONENICIA INNOVATIONS SUBSIDIARY OF PENDRELL TECHNOLOGIES LLC LLC
•
Filing: 1996-01-03
•
Granted: 1998-09-01
•
Expires: 2016-01-03
Abstract
Abstract A system, method and article of manufacture for improving object security in distributed object systems, in an information handling system employing object oriented technology, includes one or more workstations, each workstation having one or more processors, a memory system, an input/output subsystem which may include one or more input/output controllers, each controlling one or more input/output devices, such as communications devices, cursor control devices, keyboards, and display devices, an operating system program such as the OS/2 multi-tasking operating system (OS/2 is a registered trademark of International Business Machines Corporation), and an object oriented control program such as the Distributed System Object Method (DSOM) program available from International Business Machines Corporation, wherein the object oriented control program includes a vault object containing security credentials for objects in the distributed system.
Inventors
- 👤 Messaoud Benantar
- 👤 George Robert Blakley, III
- 👤 Anthony Joseph Nadalin
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-28 19:42
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/60; G06F21/62; G06F21/6218; G06F9/00; G06F9/06; G06F9/44; G06F9/448; G06F9/4488; G06F9/4492; G06F2211/00; G06F2211/007; G06F2221/00; G06F2221/21; G06F2221/2149
Claims Analysis
Total Claims: 15
Claim 1
Independent Claim
93 words
A method for improving object security in an information handling system employing object oriented technology, comprising the steps of: creating one or more vault objects for encapsulating security relevant objects; retrieving security credentials associated with an owner of a process; examining retrieved security credentials against security relevant objects in the vault to determine if the owner of the process is authorized for access to data related to the encapsulated security relevant objects; and creating a persona object, representing an authenticated identity, the personal object comprising pointers to privileges and capabilities of the owner.
Claim 2
Independent Claim
93 words
A method for improving object security in an information handling system employing object oriented technology, comprising the steps of: creating one or more vault objects for encapsulating security relevant objects; retrieving security credentials associated with an owner of a process; examining retrieved security credentials against security relevant objects in the vault to determine if the owner of the process is authorized for access to data related to the encapsulated security relevant objects; and creating a persona object, representing an authenticated identity, the personal object comprising pointers to privileges and capabilities of the owner.
Claim 3
Dependent Claim
48 words
A method according to claim 1, wherein the persona object further comprises: information for an established security context local to the owner's address space or process; and information on the quality of message protection and types of underlying mechanisms providing for the security services available to the owner.
Claim 4
Dependent Claim
36 words
A method according to claim 1, wherein the step of creating the persona object further comprises the steps of: providing a secret key evidencing a right of the owner to an account defined for the owner.
Claim 5
Dependent Claim
35 words
A method according to claim 1, further comprising the steps of: creating one or more shared security context objects, each representing a security association between two or more owners across two or more address spaces.
Claim 6
Dependent Claim
102 words
A computer readable medium comprising means for improving object services in an information handling system employing object oriented technology, comprising: means for creating one or more vault objects for encapsulating security relevant objects; means for retrieving security credentials associated with an owner of a process; means for examining retrieved security credentials against security relevant objects in the vault to determine if the owner of the process is authorized for access to data related to the encapsulated security relevant objects; and means for creating a persona object, representing an authenticated identity, the persona object comprising pointers to privileges and capabilities of the owner.
Claim 7
Dependent Claim
102 words
A computer readable medium comprising means for improving object services in an information handling system employing object oriented technology, comprising: means for creating one or more vault objects for encapsulating security relevant objects; means for retrieving security credentials associated with an owner of a process; means for examining retrieved security credentials against security relevant objects in the vault to determine if the owner of the process is authorized for access to data related to the encapsulated security relevant objects; and means for creating a persona object, representing an authenticated identity, the persona object comprising pointers to privileges and capabilities of the owner.
Claim 8
Dependent Claim
50 words
A computer readable medium, according to claim 5, wherein the persona object further comprises: information for an established security context local to the owner's address space or process; and information on the quality of message protection and types of underlying mechanisms providing for the security services available to the owner.
Claim 9
Dependent Claim
37 words
A computer readable medium, according to claim 5, wherein the means for creating the persona object further comprises: means for providing a secret key evidencing a right of the owner to an account defined for the owner.
Claim 10
Dependent Claim
36 words
A computer readable medium, according to claim 5, further comprises: means for creating one or more shared security context objects, each representing a security association between two or more owners across two or more address spaces.
Claim 11
Dependent Claim
124 words
An information handling system, comprising: one or more processors; a storage system; one or more I/O controllers; a system bus, operatively connecting the processors, the storage system and the I/O controllers; a system control program for controlling the operation of the system; means for creating one or more vault objects for encapsulating security relevant objects; means for retrieving security credentials associated with an owner of a process; means for examining retrieved security credentials against security relevant objects in the vault to determine if the owner of the process is authorized for access to data related to the encapsulated security relevant objects; and means for creating a persona object, representing an authenticated identity, the persona object comprising pointers to privileges and capabilities of the owner.
Claim 12
Dependent Claim
124 words
An information handling system, comprising: one or more processors; a storage system; one or more I/O controllers; a system bus, operatively connecting the processors, the storage system and the I/O controllers; a system control program for controlling the operation of the system; means for creating one or more vault objects for encapsulating security relevant objects; means for retrieving security credentials associated with an owner of a process; means for examining retrieved security credentials against security relevant objects in the vault to determine if the owner of the process is authorized for access to data related to the encapsulated security relevant objects; and means for creating a persona object, representing an authenticated identity, the persona object comprising pointers to privileges and capabilities of the owner.
Claim 13
Dependent Claim
46 words
An information handling system, according to claim 11, further comprising: information for an established security context local to the owner's address space or process; and information on the quality of message protection and types of underlying mechanisms providing for the security services available to the owner.
Claim 14
Dependent Claim
29 words
An information handling system, according to claim 11, further comprising: means for providing a secret key evidencing a right of the owner to an account defined for the owner.
Claim 15
Dependent Claim
36 words
An information handling system, according to claim 9, further comprising: means for creating one or more shared security context objects, each representing a security association between two or more owners across two or more address spaces.
References Cited (Backward Citations)
US5343554A
Cited
US5265221A
Cited
US5335346A
Cited
US5136712A
Cited
US5297283A
Cited
US5598562A
Cited
US5504814A
Cited
US5613148A
Cited
US5577252A
Cited
US5369702A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-08-31 | 2002-03-02 | 2002-09-01 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-08-31 | 2006-03-02 | 2006-09-01 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-08-31 | 2010-03-02 | 2010-09-01 | $7700.00 | Window Closed / Lapsed |