US5825877A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Support for portable trusted software
Assignee: Activision Publishing Inc
•
Filing: 1996-06-11
•
Granted: 1998-10-20
•
Expires: 2016-06-11
Abstract
Abstract A form of authentication is provided wherein a trusted third party signs a certificate to identify the author of a program and to secure its integrity. The program code is encapsulated or otherwise associated with the certificate and an access control list (ACL). The access control list describes the permissions and resources required by the code. An enforcement mechanism which allocates system permissions and resources in accordance with the ACL. In a preferred embodiment, a code production system communicates with a certification agency, which is a trusted third party. The certification agency issues a certificate for the code and a certificate for the access list of that code. Once the certificate is issued it is not possible for any party to modify the code or access list without invalidating the certificate. The code and its ACL, along with their certificates are stored on a server. A client downloading the code or access list can verify the integrity of the code/access list and the system can enforce the access list such that the permissions and resources are not exceeded.
Inventors
- 👤 Asit Dan
- 👤 Rajiv Ramaswami
- 👤 Dinkar Sitaram
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-24 22:45
CPC Classifications
G; G06; G06F; G06F13/00; H; H04; H04L; H04L63/00; H04L63/04; H04L63/0428; H04L63/0435; G06F21/00; G06F21/50; G06F21/52; G06F21/54; H04L63/08; H04L63/0823; H04L63/12; H04L9/00; H04L9/32; H04L9/321; H04L9/3263; H04L9/40; G06F2211/00; G06F2211/009; H04L63/10; H04L63/101
Claims Analysis
Total Claims: 23
Claim 1
Independent Claim
79 words
A method for distributing program code comprising the steps of providing to a recipient system a trusted third party certification, the trusted third party certification including a computer readable description of resources and permissions required for verified nonharmful operation of the code, wherein the description of resources required includes data describing both a quantity of at least one resource to be used by the code and a maximum rate of consumption of at least one resource by the code.
Claim 2
Independent Claim
79 words
A method for distributing program code comprising the steps of providing to a recipient system a trusted third party certification, the trusted third party certification including a computer readable description of resources and permissions required for verified nonharmful operation of the code, wherein the description of resources required includes data describing both a quantity of at least one resource to be used by the code and a maximum rate of consumption of at least one resource by the code.
Claim 3
Dependent Claim
19 words
The method of claim 1 wherein the providing comprises the step of encapsulating the certification with the program code.
Claim 4
Dependent Claim
37 words
The method of claim 1 comprising the further steps of reading the certification by the recipient system; and, allocating resources and permissions of the recipient system so as not to exceed the permissions specified in the certification.
Claim 5
Dependent Claim
35 words
The method of claim 2 comprising the further steps of denying or granting the code access and permissions to resources of the recipient system in further accordance with user selected options associated with the certification.
Claim 6
Dependent Claim
24 words
The method of claim 1 wherein the computer readable description of resources and permissions is provided to the recipient system in an encrypted form.
Claim 7
Dependent Claim
34 words
The method of claim 1 wherein the certification further includes encrypted verification data and wherein the recipient system decrypts the verification data to verify the integrity of the description of the resources and permissions.
Claim 8
Dependent Claim
26 words
The method of claim 3 wherein the description of permissions required includes data describing specific facilities of the recipient system to be accessed by the code.
Claim 9
Dependent Claim
25 words
The method of claim 1 wherein the third party certification includes a description of the functionality of the code as verified by the third party.
Claim 10
Dependent Claim
20 words
The method of claim 1 wherein the program code is an applet downloaded from a server as a program object.
Claim 11
Dependent Claim
22 words
The method of claim 1 wherein different users are allocated different resources and permissions in the recipient system for the same code.
Claim 12
Dependent Claim
23 words
The method of claim 10 wherein the set of resources and permissions allowed to different users is determined during installation of the code.
Claim 13
Dependent Claim
23 words
The method of claim 10 wherein the set of resources and permissions allowed to different users is determined during execution of the code.
Claim 14
Independent Claim
173 words
A method for distributing program code comprising the steps of: providing a recipient system with an encrypted trusted third party certification of the program code, the trusted third party certification being encapsulated with the program code and including a computer readable description of resources and permissions required for verified non-harmful operation of the code; reading the certification by the recipient system: determining the integrity of the certification by the recipient system; and, only after the integrity has been verified, allocating resources and permissions of the recipient system in accordance with user selected options so as not to exceed the permissions specified in the certification; and, executing the program code in accordance with the allocating, wherein the description of resources required includes data describing both a quantity of at least one resource to be used by the code and a maximum rate of consumption of at least one resource by the code and wherein the description of permissions required includes data describing specific facilities of the recipient system to be accessed by the code.
Claim 15
Independent Claim
173 words
A method for distributing program code comprising the steps of: providing a recipient system with an encrypted trusted third party certification of the program code, the trusted third party certification being encapsulated with the program code and including a computer readable description of resources and permissions required for verified non-harmful operation of the code; reading the certification by the recipient system: determining the integrity of the certification by the recipient system; and, only after the integrity has been verified, allocating resources and permissions of the recipient system in accordance with user selected options so as not to exceed the permissions specified in the certification; and, executing the program code in accordance with the allocating, wherein the description of resources required includes data describing both a quantity of at least one resource to be used by the code and a maximum rate of consumption of at least one resource by the code and wherein the description of permissions required includes data describing specific facilities of the recipient system to be accessed by the code.
Claim 16
Dependent Claim
135 words
A computing system, comprising: an importation device for importing programs and data into the computing system; an operating system for controlling the operation of the computing system; access logic for extracting from the data and associating with a given program a computer readable description of resources required for verified non-harmful operation of the given program, the access logic further including integrity checking logic for generating verification data indicative of the integrity of the computer readable description; and, enforcement logic coupled to the operating system and responsive to the verification data for tracking and allocating for at least one resource consumption and consumption rate within the recipient system so as not to exceed the allocation specified in the description for the given program; and, a processor for executing the given program in accordance with the allocating.
Claim 17
Dependent Claim
135 words
A computing system, comprising: an importation device for importing programs and data into the computing system; an operating system for controlling the operation of the computing system; access logic for extracting from the data and associating with a given program a computer readable description of resources required for verified non-harmful operation of the given program, the access logic further including integrity checking logic for generating verification data indicative of the integrity of the computer readable description; and, enforcement logic coupled to the operating system and responsive to the verification data for tracking and allocating for at least one resource consumption and consumption rate within the recipient system so as not to exceed the allocation specified in the description for the given program; and, a processor for executing the given program in accordance with the allocating.
Claim 18
Dependent Claim
81 words
The system of claim 14 further including a data structure stored in a random access memory and coupled to the enforcement logic, the data structure including at least a first field for tracking actual resources consumed and a second field for tracking rate of consumption of the resources, a third field for storing a limit on resource consumption derived from the description and a fourth field for storing limit on the rate of consumption of the resource derived from the description.
Claim 19
Dependent Claim
28 words
The system of claim 14 wherein the access manager includes means for de-encapsulating the description from a package including the program code and means for decrypting the description.
Claim 20
Dependent Claim
38 words
The system of claim 14 further wherein the enforcement logic includes means for denying or granting the code access and permissions to resources of the computing system in further accordance with user selected options associated with the description.
Claim 21
Dependent Claim
27 words
The method of claim 1 comprising the further step of delaying operation of the code by the recipient system to conform to the maximum rate of consumption.
Claim 22
Dependent Claim
27 words
The method of claim 13 comprising the further step of delaying operation of the code by the recipient system to conform to the maximum rate of consumption.
Claim 23
Dependent Claim
25 words
The computing system of claim 14, wherein the enforcement logic includes means for delaying operation of the given program to conform to the consumption rate.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-10-19 | 2002-04-20 | 2002-10-20 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-10-19 | 2006-04-20 | 2006-10-20 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-10-19 | 2010-04-20 | 2010-10-20 | $7700.00 | Window Closed / Lapsed |