US5915085A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Multiple resource or security contexts in a multithreaded application
Assignee: International Business Machines Corp
•
Filing: 1997-02-28
•
Granted: 1999-06-22
•
Expires: 2017-02-28
Abstract
Abstract A method and system for creating flexible security control mechanisms and virtualization of nominally shared system resources. The goal is to minimize the potential for interference between concurrently executing applications in a multithreaded environment. Executable content is associated with security policies appropriate to the content, and policies are associated with the content loader; security policies are dynamically computed so that content from multiple sources can be combined to create new, yet secure, function; digitally signed executable content can bypass some security restrictions; and, nominally shared resources are managed via policies associated with the content loading mechanism.
Inventors
- 👤 Lawrence Koved
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-26 07:56
CPC Classifications
G; G06; G06F; G06F9/00; G06F9/06; G06F9/46; G06F9/468; G06F21/00; G06F21/50; G06F21/52; G06F21/54
Claims Analysis
Total Claims: 32
Claim 1
Independent Claim
107 words
In a computer system including a system security manager and a multithreaded application environment, a computerized method of supporting multiple security or resource contexts, said method comprising the steps of: instantiating at least one thread for an execution of content, each thread having at least one content context; associating each content context with a content loader for loading said each context for execution; associating the loader with one of a security requirement and a resource requirement, wherein the requirement may vary according to said each content context; and dynamically managing one of a security request and a resource request for each thread according to an associated requirement.
Claim 2
Dependent Claim
107 words
In a computer system including a system security manager and a multithreaded application environment, a computerized method of supporting multiple security or resource contexts, said method comprising the steps of: instantiating at least one thread for an execution of content, each thread having at least one content context; associating each content context with a content loader for loading said each context for execution; associating the loader with one of a security requirement and a resource requirement, wherein the requirement may vary according to said each content context; and dynamically managing one of a security request and a resource request for each thread according to an associated requirement.
Claim 3
Dependent Claim
53 words
The method of claim 1, wherein the requirement is the security requirement, further comprising the steps of: said instantiating step comprises the step of instantiating multiple threads, at least two of the threads having different security requirements; and dynamically managing security for said each thread as a function of the different security requirements.
Claim 4
Dependent Claim
23 words
The method of claim 1, further comprising the step of instantiating security managers and associating instances of security managers with the content loader.
Claim 5
Dependent Claim
19 words
The method of claim 3, wherein said step of associating security managers with the content loader is done indirectly.
Claim 6
Dependent Claim
30 words
The method of claim 3, wherein said step of dynamically managing comprises the step of redirecting the security requests from the system security manager to the instances of security managers.
Claim 7
Dependent Claim
56 words
The method of claim 3, further comprising the steps of: said system security manager receiving said one of the security request and the resource request; searching for and identifying all security managers associated with the thread; and selecting a most restrictive one of the security requirement and the resource requirement associated with said all security managers.
Claim 8
Dependent Claim
21 words
The method of claim 6, wherein no security mangers are identified, further comprising the step of assigning a default security manager.
Claim 9
Dependent Claim
35 words
The method of claim 3, further comprising the steps of: said system security manager receiving said one of the security request and the resource request; constraining said searching by determining if the content is trusted.
Claim 10
Dependent Claim
49 words
The method of claim 1, further comprising the steps of: said system security manager receiving the resource request; determining if a resource associated with the resource request is nominally shared by all threads; and instantiating and associating a non-shared copy of a nominally shared resource with the content loader.
Claim 11
Dependent Claim
25 words
The method of claim 9 wherein the step of associating the nonshared copy of a nominally shared resource is indirectly associated with the content loader.
Claim 12
Dependent Claim
61 words
The method of claim 3, wherein the resource requirement includes resource limits, said method comprising the steps of: said system security manager receiving the resource request; searching for and identifying all security managers associated with the thread, in response to said system security manager receiving the resource request; and identifying by said all security managers whether resource limits have been exceeded.
Claim 13
Dependent Claim
14 words
The method of claim 1, wherein the application environment is a Java virtual machine.
Claim 14
Dependent Claim
23 words
The method of claim 1, wherein said step of associating the loader comprises the step of associating the loader with an unrestricted requirement.
Claim 15
Dependent Claim
27 words
The method of claim 1, further comprising the step of associating a child thread or child threadgroup with one of the security requirement and the resource requirement.
Claim 16
Dependent Claim
45 words
The method of claim 1, further comprising the steps of: said instantiating step comprising instantiating a runtime stack for each thread, the stack including at least one stack frame, wherein the content context represents one of an uncompleted method and subroutine call in the thread.
Claim 17
Dependent Claim
109 words
A computer system for supporting multiple security or resource contexts, said system comprising: a system security manager coupled to a multithreaded application environment; means for instantiating at least one thread for an execution of content, each thread having at least one content context; means for associating each content context with a content loader for loading said each context for execution; means for associating the loader with one of a security requirement and a resource requirement, wherein the requirement may vary according to said each content context; and means for dynamically managing one of a security request and a resource request for each thread, coupled to said means for associating.
Claim 18
Dependent Claim
109 words
A computer system for supporting multiple security or resource contexts, said system comprising: a system security manager coupled to a multithreaded application environment; means for instantiating at least one thread for an execution of content, each thread having at least one content context; means for associating each content context with a content loader for loading said each context for execution; means for associating the loader with one of a security requirement and a resource requirement, wherein the requirement may vary according to said each content context; and means for dynamically managing one of a security request and a resource request for each thread, coupled to said means for associating.
Claim 19
Dependent Claim
55 words
The system of claim 16, wherein the requirement is the security requirement, further comprising: said means for instantiating comprises means for instantiating multiple threads, at least two of the threads having different security requirements; and means for dynamically managing comprises dynamically managing security for said each thread as a function of the different security requirements.
Claim 20
Dependent Claim
22 words
The system of claim 16, further comprising means for instantiating security managers and associating instances of security managers with the content loader.
Claim 21
Dependent Claim
17 words
The system of claim 18, wherein said means for associating security managers with the content loader indirect.
Claim 22
Dependent Claim
29 words
The system of claim 18, wherein said means for dynamically managing comprises means for redirecting the security requests from the system security manager to the instances of security managers.
Claim 23
Dependent Claim
68 words
The system claim 18, further comprising: means for said system security manager to receive said one of the security request and the resource request; means for searching for and identifying all security managers associated with the thread coupled to said means for said system security manager; and means for selecting a most restrictive one of the security requirement and the resource requirement associated with said all security managers.
Claim 24
Dependent Claim
20 words
The system of claim 21, wherein no security mangers are identified, further comprising means for assigning a default security manager.
Claim 25
Dependent Claim
41 words
The system of claim 18, further comprising the steps of: means for said system security manager to receive said one of the security request and the resource request; and means for constraining said searching by determining if the content is trusted.
Claim 26
Dependent Claim
62 words
The system of claim 16, further comprising the steps of: means for said system security manager to receive the resource request; means for determining if a resource associated with the resource request is nominally shared by all threads; and means for instantiating and associating a non-shared copy of a nominally shared resource with the content loader, coupled to said means for determining.
Claim 27
Dependent Claim
20 words
The system claim 24 wherein the nonshared copy of a nominally shared resource is indirectly associated with the content loader.
Claim 28
Dependent Claim
66 words
The system of claim 18, wherein the resource requirement includes resource limits, said system method comprising: means for said system security manager to receive the resource request; means for searching for and identifying all security managers associated with the thread, in response to said system security manager receiving the resource request; and means for identifying by said all security managers whether resource limits have been exceeded.
Claim 29
Dependent Claim
14 words
The system of claim 16, wherein the application environment is a Java virtual machine.
Claim 30
Dependent Claim
21 words
The system of claim 16, wherein means for associating the loader comprises means for associating the loader with an unrestricted requirement.
Claim 31
Dependent Claim
25 words
The system of claim 16, wherein means for associating a child thread or child threadgroup with one of the security requirement and the resource requirement.
Claim 32
Dependent Claim
45 words
The system of claim 16, further comprising; said means for instantiating comprising means for instantiating a runtime stack for each thread, the stack including at least one stack frame, wherein the content context represents one of an uncompleted method and subroutine call in the thread.
References Cited (Backward Citations)
US4919545A
Cited
US5265206A
Cited
US5412717A
Cited
US5692047A
Cited
US5802276A
Cited
US5754763A
Cited
US5740248A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2002-06-21 | 2002-12-21 | 2003-06-22 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2006-06-21 | 2006-12-21 | 2007-06-22 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2010-06-21 | 2010-12-21 | 2011-06-22 | $7700.00 | Window Closed / Lapsed |