← Back to Patent Explorer
US5848232A Expired / Lapsed US ⏱️ 0.0 years remaining

Method of making secure collaboration between objects of an object-oriented program

Assignee: Alcatel Lucent SAS
•
Filing: 1996-12-26
•
Granted: 1998-12-08
•
Expires: 2016-12-26
📄 Original PDF 🌐 Google Patents 🔄 Sync Now

Abstract

Abstract A method consists in assigning an authorization level (AUTH) to a client object and a "dynamic" sensitivity level (DSL) to a method (or data processing procedure) of a server object (ProcObjSv). The dynamic sensitivity level is computed based on static sensitivity levels (SSLs) at the moment when the server object is instantiated. The authorization level of the client object is passed to the method of the server object when the method of the server object is invoked by the client object, and this authorization level (AUTH) is compared with the dynamic sensitivity level (DSL) of the method in order to control access. The method makes it possible to implement a multi-level security model.

Inventors

  • 👤 Jean-Marc Lermuzeaux
  • 👤 Neil Butler

Bibliographic Details

Application Number —
Jurisdiction US
Data Source google_patents
Last Synchronized 2026-10-31 16:56
CPC Classifications
G; G06; G06F; G06F9/00; G06F9/06; G06F9/44; G06F9/448; G06F9/4488; G06F9/449

Claims Analysis

Total Claims: 3
Claim 1
Independent Claim 205 words
A method of making secure, in an object-oriented program, collaboration between a data processing procedure of a client object and another data processing procedure of a server object of said program, the method comprising: assigning an authorization level to the client object; assigning a dynamic sensitivity level to the data processing procedure of the server object when said server object is instantiated by an object constructor, said dynamic sensitivity level being computed on the basis of static sensitivity levels and the authorization level passed to the object constructor, the static sensitivity levels being held in a memory and being assigned respectively to different logical entities of the program; causing the authorization level assigned to the client object to be passed to the data processing procedure of the server object along with the message sent by the data processing procedure of the client object to invoke the data processing procedure of said server object; and checking, in the data processing procedure of the server object, whether the authorization level, which has been passed thereto, corresponds to a sensitivity level sufficient to allow collaboration between the client object and the server object, by comparing the authorization level with the assigned dynamic sensitivity level of the server object.
Claim 2
Independent Claim 205 words
A method of making secure, in an object-oriented program, collaboration between a data processing procedure of a client object and another data processing procedure of a server object of said program, the method comprising: assigning an authorization level to the client object; assigning a dynamic sensitivity level to the data processing procedure of the server object when said server object is instantiated by an object constructor, said dynamic sensitivity level being computed on the basis of static sensitivity levels and the authorization level passed to the object constructor, the static sensitivity levels being held in a memory and being assigned respectively to different logical entities of the program; causing the authorization level assigned to the client object to be passed to the data processing procedure of the server object along with the message sent by the data processing procedure of the client object to invoke the data processing procedure of said server object; and checking, in the data processing procedure of the server object, whether the authorization level, which has been passed thereto, corresponds to a sensitivity level sufficient to allow collaboration between the client object and the server object, by comparing the authorization level with the assigned dynamic sensitivity level of the server object.
Claim 3
Dependent Claim 32 words
The method of claim 1, wherein in said checking step, collaboration between the client object and the server object is allowed when the authorization level is higher than the dynamic sensitivity level.

References Cited (Backward Citations)

US5644727A Cited
US5335346A Cited
US5241594A Cited
US5550968A Cited
US5629981A Cited
US5696966A Cited

USPTO Annuity & Maintenance Windows

Annuity Stage Window Opens Payment Deadline Surcharge Period Until Estimated Fee Status
3.5 Years (Year 4) 2001-12-07 2002-06-08 2002-12-08 $2000.00 Window Closed / Lapsed
7.5 Years (Year 8) 2005-12-07 2006-06-08 2006-12-08 $3760.00 Window Closed / Lapsed
11.5 Years (Year 12) 2009-12-07 2010-06-08 2010-12-08 $7700.00 Window Closed / Lapsed

Assigned Categories & Tags

No categories assigned to this patent yet.

Assign Category Tag