Patent US5832209A successfully refreshed from Google Patents.
US5832209A
Expired / Lapsed
US
⏱️ 0.0 years remaining
System and method for providing object authorization in a distributed computed network
Assignee: Teradata US Inc
•
Filing: 1996-12-11
•
Granted: 1998-11-03
•
Expires: 2016-12-11
Abstract
Abstract For use in a computer network having first and second endpoints coupled thereto, a target application object being instantiatable on the first endpoint and a corresponding surrogate application object being instantiatable on the second endpoint, a secure system for, and method of, allowing the target application object to authenticate and authorize the surrogate application object and a computer network employing the system or the method. The system includes: (1) a first security target object, instantiatable on a central security endpoint coupled to the computer network, for instantiating and authenticating a corresponding first security surrogate object on the first endpoint and associated with the target application object and (2) a second security target object, instantiatable on the central security endpoint, for instantiating and authenticating a corresponding second security surrogate object on the second endpoint and associated with the surrogate application object, the central security endpoint creating an authorization code to authorize the first and second security target objects and thereby authorize the first and second security surrogate objects to enable operation of the target and surrogate application objects without requiring the authorization code to be transmitted through the computer network.
Inventors
- 👤 David R. Krantz
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-08 13:52
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/60; G06F21/62; G06F21/6218; G06F21/30; G06F21/44; G06F21/445; G06F21/6236; H; H04; H04L; H04L63/00; H04L63/10; G06F2221/00; G06F2221/21; G06F2221/2115
Claims Analysis
Total Claims: 23
Claim 1
Independent Claim
136 words
For use in a computer network having first and second endpoints coupled thereto, a sucure system for allowing a client application object on said first endpoint to interact with a secured service object on said second endpoint comprising: a central security endpoint coupled to said computer network for creating a first authorization target object capable of interacting with a first authorization surrogate object associated with said client application object on said first endpoint and for creating a second authorization target object capable of interaction with a second authorization surrogate object associated with said secured service object on said second endpoint, said first authorization target object and said second authorization target object thereby enabling interaction of said client application object and said secured service object without requiring an authorization code to be transmitted through said computer network.
Claim 2
Dependent Claim
136 words
For use in a computer network having first and second endpoints coupled thereto, a sucure system for allowing a client application object on said first endpoint to interact with a secured service object on said second endpoint comprising: a central security endpoint coupled to said computer network for creating a first authorization target object capable of interacting with a first authorization surrogate object associated with said client application object on said first endpoint and for creating a second authorization target object capable of interaction with a second authorization surrogate object associated with said secured service object on said second endpoint, said first authorization target object and said second authorization target object thereby enabling interaction of said client application object and said secured service object without requiring an authorization code to be transmitted through said computer network.
Claim 3
Dependent Claim
29 words
The system as recited in claim 1 wherein said first endpoint is a client for said computer network and said second endpoint is a server for said computer network.
Claim 4
Dependent Claim
36 words
The system as recited in claim 1 wherein said first and second authorization target objects communicate security information within said central security endpoint to authorize interaction of said client application object and said secured service object.
Claim 5
Dependent Claim
46 words
The system as recited in claim 1 wherein said central security endpoint creates said authorization code after authenticating a selected one of the group consisting of: an identity of said first endpoint, an identity of a user of said first endpoint, and said client application object.
Claim 6
Dependent Claim
36 words
The system as recited in claim 1 wherein said first and second authorization target objects authorize said first and second authorization surrogate objects by returning positive authentication acknowledgments to said first and second authorization surrogate objects.
Claim 7
Dependent Claim
47 words
The system as recited in claim 1 wherein said central security endpoint maintains a repository of first and second authorization target objects to allow a plurality of first and second authorization surrogate objects to be instantiated on a corresponding plurality of further endpoints of said computer network.
Claim 8
Dependent Claim
28 words
The system as recited in claim 5 wherein said first and second authorization target objects further return randomly generated identifications to said first and second authorization surrogate objects.
Claim 9
Dependent Claim
144 words
For use in a computer network having first and second endpoints coupled thereto, a method of allowing a client application object on said first endpoint to interact with a secured service object on said second endpoint, the method comprising the steps of: creating on a central security endpoint coupled to said computer network a first authorization target object capable of interacting with a first authorization surrogate object associated with said client application object on said first endpoint; and creating on said central security endpoint a second authorization target object capable of interaction with a second authorization surrogate object associated with said secured service object on said second endpoint, wherein said first authorization target object and said second authorization target object enable interaction of said client application object and said secured service object without requiring an authorization code to be transmitted through said computer network.
Claim 10
Dependent Claim
144 words
For use in a computer network having first and second endpoints coupled thereto, a method of allowing a client application object on said first endpoint to interact with a secured service object on said second endpoint, the method comprising the steps of: creating on a central security endpoint coupled to said computer network a first authorization target object capable of interacting with a first authorization surrogate object associated with said client application object on said first endpoint; and creating on said central security endpoint a second authorization target object capable of interaction with a second authorization surrogate object associated with said secured service object on said second endpoint, wherein said first authorization target object and said second authorization target object enable interaction of said client application object and said secured service object without requiring an authorization code to be transmitted through said computer network.
Claim 11
Dependent Claim
29 words
The method as recited in claim 8 wherein said first endpoint is a client for said computer network and said second endpoint is a server for said computer network.
Claim 12
Dependent Claim
41 words
The method as recited in claim 8 further comprising the step of communicating security information within said central security endpoint between said first and second authorization target objects to authorize interaction of said client application object and said secured service object.
Claim 13
Dependent Claim
50 words
The method as recited in claim 8 wherein said step of creating comprises the step of creating said authorization code after authenticating a selected one of the group consisting of: an identity of said first endpoint, an identity of a user of said first endpoint, and said client application object.
Claim 14
Dependent Claim
39 words
The method as recited in claim 8 further comprising the step of authorizing said first and second authorization surrogate objects by transmitting positive authentication acknowledgments in response to authorization requests received from said first and second authorization surrogate objects.
Claim 15
Dependent Claim
52 words
The method as recited in claim 8 further comprising the step of maintaining a repository of first and second authorization target objects in said central security endpoint to allow a plurality of first and second authorization surrogate objects to be instantiated on a corresponding plurality of further endpoints of said computer network.
Claim 16
Dependent Claim
36 words
The method as recited in claim 12 wherein said step of authorizing said first and second authorization surrogate objects further includes the step of transmitting randomly generated identifications to said first and second authorization surrogate objects.
Claim 17
Dependent Claim
171 words
A computer network, comprising: a plurality of interconnected endpoints, one of said plurality of endpoints being designated as a server and another of said plurality of endpoints being designated as a client; a network operating system for governing communication of data among said plurality of endpoints; and a secure system, executable within said network operating system on a central security endpoint of said computer network, for allowing a client application object on said client to interact with a secured service object on said server, said secure system comprising: a first authorization target object capable of interacting with a first authorization surrogate object associated with said client application object on said client and a second authorization target object capable of interaction with a second authorization surrogate object associated with said secured service object on said server, said first authorization target object and said second authorization target object thereby enabling interaction of said client application object and said secured service object without requiring an authorization code to be transmitted through said computer network.
Claim 18
Dependent Claim
171 words
A computer network, comprising: a plurality of interconnected endpoints, one of said plurality of endpoints being designated as a server and another of said plurality of endpoints being designated as a client; a network operating system for governing communication of data among said plurality of endpoints; and a secure system, executable within said network operating system on a central security endpoint of said computer network, for allowing a client application object on said client to interact with a secured service object on said server, said secure system comprising: a first authorization target object capable of interacting with a first authorization surrogate object associated with said client application object on said client and a second authorization target object capable of interaction with a second authorization surrogate object associated with said secured service object on said server, said first authorization target object and said second authorization target object thereby enabling interaction of said client application object and said secured service object without requiring an authorization code to be transmitted through said computer network.
Claim 19
Dependent Claim
37 words
The computer network as recited in claim 15 wherein said first and second authorization target objects communicate security information within said central security endpoint to authorize interaction of said client application object and said secured service object.
Claim 20
Dependent Claim
45 words
The computer network as recited in claim 15 wherein said central security endpoint creates said authorization code after authenticating a selected one of the group consisting of: an identity of said client, an identity of a user of said client, and said client application object.
Claim 21
Dependent Claim
37 words
The computer network as recited in claim 15 wherein said first and second authorization target objects authorize said first and second authorization surrogate objects by transmitting positive authentication acknowledgments to said first and second authorization surrogate objects.
Claim 22
Dependent Claim
48 words
The computer network as recited in claim 15 wherein said central security endpoint maintains a repository of first and second authorization target objects to allow a plurality of first and second authorization surrogate objects to be instantiated on a corresponding plurality of further endpoints of said computer network.
Claim 23
Dependent Claim
29 words
The computer network as recited in claim 17 wherein said first and second authorization target objects further return randomly generated identifications to said first and second authorization surrogate objects.
References Cited (Backward Citations)
US5008853A
Cited
US5371851A
Cited
US5481720A
Cited
US5032979A
Cited
US5241624A
Cited
US5276901A
Cited
US5359721A
Cited
US5375244A
Cited
US5506961A
Cited
US5542046A
Cited
US5469576A
Cited
US5504892A
Cited
US5682478A
Cited
US5742759A
Cited
US5657452A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-11-02 | 2002-05-04 | 2002-11-03 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-11-02 | 2006-05-04 | 2006-11-03 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-11-02 | 2010-05-04 | 2010-11-03 | $7700.00 | Window Closed / Lapsed |