US5848232A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method of making secure collaboration between objects of an object-oriented program
Assignee: Alcatel Lucent SAS
•
Filing: 1996-12-26
•
Granted: 1998-12-08
•
Expires: 2016-12-26
Abstract
Abstract A method consists in assigning an authorization level (AUTH) to a client object and a "dynamic" sensitivity level (DSL) to a method (or data processing procedure) of a server object (ProcObjSv). The dynamic sensitivity level is computed based on static sensitivity levels (SSLs) at the moment when the server object is instantiated. The authorization level of the client object is passed to the method of the server object when the method of the server object is invoked by the client object, and this authorization level (AUTH) is compared with the dynamic sensitivity level (DSL) of the method in order to control access. The method makes it possible to implement a multi-level security model.
Inventors
- 👤 Jean-Marc Lermuzeaux
- 👤 Neil Butler
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-31 16:56
CPC Classifications
G; G06; G06F; G06F9/00; G06F9/06; G06F9/44; G06F9/448; G06F9/4488; G06F9/449
Claims Analysis
Total Claims: 3
Claim 1
Independent Claim
205 words
A method of making secure, in an object-oriented program, collaboration between a data processing procedure of a client object and another data processing procedure of a server object of said program, the method comprising: assigning an authorization level to the client object; assigning a dynamic sensitivity level to the data processing procedure of the server object when said server object is instantiated by an object constructor, said dynamic sensitivity level being computed on the basis of static sensitivity levels and the authorization level passed to the object constructor, the static sensitivity levels being held in a memory and being assigned respectively to different logical entities of the program; causing the authorization level assigned to the client object to be passed to the data processing procedure of the server object along with the message sent by the data processing procedure of the client object to invoke the data processing procedure of said server object; and checking, in the data processing procedure of the server object, whether the authorization level, which has been passed thereto, corresponds to a sensitivity level sufficient to allow collaboration between the client object and the server object, by comparing the authorization level with the assigned dynamic sensitivity level of the server object.
Claim 2
Independent Claim
205 words
A method of making secure, in an object-oriented program, collaboration between a data processing procedure of a client object and another data processing procedure of a server object of said program, the method comprising: assigning an authorization level to the client object; assigning a dynamic sensitivity level to the data processing procedure of the server object when said server object is instantiated by an object constructor, said dynamic sensitivity level being computed on the basis of static sensitivity levels and the authorization level passed to the object constructor, the static sensitivity levels being held in a memory and being assigned respectively to different logical entities of the program; causing the authorization level assigned to the client object to be passed to the data processing procedure of the server object along with the message sent by the data processing procedure of the client object to invoke the data processing procedure of said server object; and checking, in the data processing procedure of the server object, whether the authorization level, which has been passed thereto, corresponds to a sensitivity level sufficient to allow collaboration between the client object and the server object, by comparing the authorization level with the assigned dynamic sensitivity level of the server object.
Claim 3
Dependent Claim
32 words
The method of claim 1, wherein in said checking step, collaboration between the client object and the server object is allowed when the authorization level is higher than the dynamic sensitivity level.
References Cited (Backward Citations)
US5644727A
Cited
US5335346A
Cited
US5241594A
Cited
US5550968A
Cited
US5629981A
Cited
US5696966A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-12-07 | 2002-06-08 | 2002-12-08 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-12-07 | 2006-06-08 | 2006-12-08 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-12-07 | 2010-06-08 | 2010-12-08 | $7700.00 | Window Closed / Lapsed |