US5859966A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Security system for computer systems
Assignee: EMC Corp
•
Filing: 1995-10-10
•
Granted: 1999-01-12
•
Expires: 2015-10-10
Abstract
Abstract A security system for a computer system imposes specific limitations on who has access to the computer system and to exactly what operations and data. Viruses are securely contained and prevented from expanding into areas where they can destroy stored programs or data. Viruses are also prevented from being introduced or executed in a large number of instances. The totality of computer functions is broken up into a set of events with an associated set of capabilities and different capabilities are assigned to each user depending on the particular job which that user is to do on the computer system. Also, security labels are placed on each data file and other system resources, and on each process. Further, a range of hierarchy/category labels (MAC labels) is assigned to each process to define a sub-lattice in which special capabilities can apply. Further, the hierarchy of labels is divided into a small number (for example 3) of regions, and a process operating in one region is generally not allowed to cross over into another region. Further, an owner of a data file is allowed to place restrictions on the file so that only users who posses certain privileges can gain access to the file.
Inventors
- 👤 Kenneth John Hayman
- 👤 Michael Donovan Keene
- 👤 Eric Scott Lewine
- 👤 William James Meyers
- 👤 Jon Frederick Spencer
- 👤 II Millard Cranford Taylor
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-31 12:03
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F2221/00; G06F2221/21; G06F2221/2113; Y; Y10; Y10S; Y10S707/00; Y10S707/99931
Claims Analysis
Total Claims: 15
Claim 1
Independent Claim
166 words
A security control method for a computer system, said method comprising steps of: (a) storing in a database of said computer system and in the computer system itself security policies; (b) continually accessing said database and the computer system during use thereof in order to determine the specific policy stored therein with respect to a particular subject presently using the computer system; and (c) allowing the subject access to said computer system only to the extent allowed by the results of step (b); wherein said database contains: a subject inheritable capability set containing a plurality of capabilities which a subject can pass on to future program executions, a subject bounding capability set containing an absolute upper limit on all capabilities assigned to a subject, and further wherein, according to the security policy stored in said database and the computer system, a subject is prohibited from passing on capabilities in its subject inheritable capability set when such capabilities are not included in the subject's bounding capability set.
Claim 2
Dependent Claim
166 words
A security control method for a computer system, said method comprising steps of: (a) storing in a database of said computer system and in the computer system itself security policies; (b) continually accessing said database and the computer system during use thereof in order to determine the specific policy stored therein with respect to a particular subject presently using the computer system; and (c) allowing the subject access to said computer system only to the extent allowed by the results of step (b); wherein said database contains: a subject inheritable capability set containing a plurality of capabilities which a subject can pass on to future program executions, a subject bounding capability set containing an absolute upper limit on all capabilities assigned to a subject, and further wherein, according to the security policy stored in said database and the computer system, a subject is prohibited from passing on capabilities in its subject inheritable capability set when such capabilities are not included in the subject's bounding capability set.
Claim 3
Dependent Claim
74 words
The security control method of claim 1, wherein said database and computer system contains Mandatory Access Control labels for each subject and each object, said labels being arranged in a hierarchical lattice, and further wherein, according to the security policy stored in said database and computer system, a range of Mandatory Access Control labels is assigned to a subject and that subject has access to objects having Mandatory Access Control labels within the range.
Claim 4
Dependent Claim
50 words
The method of claim 2 wherein according to the security policy stored in said database and computer system, a subject assigned a range of Mandatory Access Control labels is further assigned a set of capabilities which allow it additional accesses to objects having Mandatory Access Control labels within the range.
Claim 5
Dependent Claim
21 words
The security control method of claim 2, wherein said hierarchical lattice is divided into a plurality of distinct and non-overlapping regions.
Claim 6
Dependent Claim
76 words
The security control method of claim 1, wherein said database and computer system contains Mandatory Access Control labels for each subject and each object, said labels being arranged in a hierarchical lattice, and further wherein, according to the security policy stored in said database and computer system, a range of Mandatory Access Control labels is assigned to an object and that object is accessible to any subject having a Mandatory Access Control label within the range.
Claim 7
Dependent Claim
21 words
The security control method of claim 5, wherein said hierarchical lattice is divided into a plurality of distinct and non-overlapping regions.
Claim 8
Dependent Claim
79 words
The security control method of claim 1, wherein said database and computer system contains a required capability set containing a plurality of capabilities for an object and an effective capability set containing a plurality of capabilities for each subject, and further wherein, according to the security policy stored in said database and computer system, a subject is allowed to access an object if the subject's effective capability set includes all of the capabilities in the object's required capability set.
Claim 9
Dependent Claim
114 words
The security control method of claim 1, wherein said database and computer system contains Mandatory Access Control labels for each subject and each object, said labels being arranged in a hierarchical lattice, with higher level labels being assigned to an administrative region, intermediate level labels being assigned to a user region and lower level labels being assigned to a virus prevention region, and further wherein, according to the security policy stored in said database and computer system, a subject operating in one Mandatory Access Control region is not allowed to access an object in another region unless a special capability or a special set of Mandatory Access Control attributes is assigned to the subject.
Claim 10
Dependent Claim
38 words
The security control method of claim 8, wherein according to the security policy stored in said database and computer system, subjects are only allowed to run programs which have Mandatory Access Control labels in said virus prevention region.
Claim 11
Dependent Claim
69 words
The security control method of claim 1, wherein said database and computer system contains Mandatory Access Control labels for each subject and each object, said labels being arranged in a hierarchical lattice with each label having a binary security attribute, and further wherein, said database contains a text attribute for each Mandatory Access Control label, said text attribute being stored alongside the respective binary security attribute for each label.
Claim 12
Dependent Claim
61 words
The security control method of claim 1, wherein said database contains a plurality of authentication mechanisms which a user must correctly respond to before being allowed initial access to the computer system, and further wherein, each user can be assigned a different set of authentication mechanism which the user must correctly respond to before being allowed initial access to the network.
Claim 13
Dependent Claim
69 words
The security control method of claim 1, wherein said database contains an administrative capability set containing a plurality of capabilities, each capability being a different type of privilege which an administrator can confer upon subjects, and further wherein, according to the security policy stored in said database and computer system, an administrator is prohibited from assigning a subject a capability which is not in the administrator's administrative capabilities set.
Claim 14
Independent Claim
204 words
A method of executing a program on a computer, said program including user mode operations which a user specifically requests the computer to perform and which the user usually has the capability to perform, and system mode operations which the system performs for system maintenance or integrity purposes, and augmented user operations in which the system provides a few select capabilities to enhance those provided by the user; said method containing steps of: setting a subject's effective capability set equal to the subject's inheritable capability set during the time in which a sequential string of user mode operations is being executed by said computer; setting a subject's effective capability set equal to its permitted capability set during the time in which a string of sequential system mode operations is being executed by said computer; and setting a subject's effective capability set equal to its inheritable capability set during the time in which a subsequent sequential string of user mode operations is being executed by said computer; setting a subject's effective capability set equal to its inheritable capability set plus a well-defined set of augmenting capabilities during the time in which a string of sequential augmented user mode operations is being executed by said computer.
Claim 15
Independent Claim
204 words
A method of executing a program on a computer, said program including user mode operations which a user specifically requests the computer to perform and which the user usually has the capability to perform, and system mode operations which the system performs for system maintenance or integrity purposes, and augmented user operations in which the system provides a few select capabilities to enhance those provided by the user; said method containing steps of: setting a subject's effective capability set equal to the subject's inheritable capability set during the time in which a sequential string of user mode operations is being executed by said computer; setting a subject's effective capability set equal to its permitted capability set during the time in which a string of sequential system mode operations is being executed by said computer; and setting a subject's effective capability set equal to its inheritable capability set during the time in which a subsequent sequential string of user mode operations is being executed by said computer; setting a subject's effective capability set equal to its inheritable capability set plus a well-defined set of augmenting capabilities during the time in which a string of sequential augmented user mode operations is being executed by said computer.
References Cited (Backward Citations)
US4442484A
Cited
US4713753A
Cited
US5121345A
Cited
US5265221A
Cited
US5335346A
Cited
US5469556A
Cited
US5339403A
Cited
US5204961A
Cited
US5263147A
Cited
US5283828A
Cited
US5504814A
Cited
US5577209A
Cited
US5355474A
Cited
US5481700A
Cited
US5375244A
Cited
US5432934A
Cited
US5455953A
Cited
US5572673A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2002-01-11 | 2002-07-13 | 2003-01-12 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2006-01-11 | 2006-07-13 | 2007-01-12 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2010-01-11 | 2010-07-13 | 2011-01-12 | $7700.00 | Window Closed / Lapsed |