US5966715A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Application and database security and integrity system and method
Assignee: CSG Systems Inc
•
Filing: 1995-12-29
•
Granted: 1999-10-12
•
Expires: 2015-12-29
Abstract
Abstract A system and method for ensuring the security and integrity of applications and databases. The present invention provides a user management system which allows permissive access to applications and stored procedures using a directed acyclic graph structure which allows users or groups of users to have the capability to access the desired applications and stored procedures. Also provided is a version control management system which ensures a user is using the desired or current version of an application and also provides a framework for a developer to develop an application and install it on the system.
Inventors
- 👤 Christopher Lee Sweeney
- 👤 Scott A. Stodghill
- 👤 Kurt A. DeShazer
- 👤 Aravindan Marimuthu
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-08 18:02
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/60; G06F21/604; G06F21/62; G06F21/6218; Y; Y10; Y10S; Y10S707/00; Y10S707/99931; Y10S707/99939; Y10S707/99951; Y10S707/99952; Y10S707/99954
Claims Analysis
Total Claims: 22
Claim 1
Independent Claim
134 words
A method of controlling access to applications on a system having a data server, comprising the steps of: obtaining a user identification entered by a user; accessing a selected application on the data server; accessing a file having data comprising a directed acyclic graph structure, said directed acyclic graph structure having at least two levels of nodes, each node providing for indicating the grant or denial of permission to maintain access to a specific application; determining whether the user is authorized to maintain access to the selected application using the user identification; obtaining a set of files for a version of the selected application that the user is permitted to use; initiating the selected application using the files obtained; and checking for pending versions of the selected application during execution of the selected application.
Claim 2
Independent Claim
134 words
A method of controlling access to applications on a system having a data server, comprising the steps of: obtaining a user identification entered by a user; accessing a selected application on the data server; accessing a file having data comprising a directed acyclic graph structure, said directed acyclic graph structure having at least two levels of nodes, each node providing for indicating the grant or denial of permission to maintain access to a specific application; determining whether the user is authorized to maintain access to the selected application using the user identification; obtaining a set of files for a version of the selected application that the user is permitted to use; initiating the selected application using the files obtained; and checking for pending versions of the selected application during execution of the selected application.
Claim 3
Independent Claim
140 words
A method of providing a user with a latest version of a selected application in a system having at least one data server, comprising the steps of: obtaining a user identification entered by a user; determining which applications the user is permitted to use; obtaining a selection entered by the user of an application the user is permitted to use; determining which version of the selected application the user is permitted to use; obtaining a set of files for the version of the selected application that the user is permitted to use; initiating the selected application using the set of files obtained; and checking for a version of the selected application that is more recent than the version of the selected application which has been initiated, wherein the step of checking is carried out during execution of the selected application.
Claim 4
Independent Claim
140 words
A method of providing a user with a latest version of a selected application in a system having at least one data server, comprising the steps of: obtaining a user identification entered by a user; determining which applications the user is permitted to use; obtaining a selection entered by the user of an application the user is permitted to use; determining which version of the selected application the user is permitted to use; obtaining a set of files for the version of the selected application that the user is permitted to use; initiating the selected application using the set of files obtained; and checking for a version of the selected application that is more recent than the version of the selected application which has been initiated, wherein the step of checking is carried out during execution of the selected application.
Claim 5
Dependent Claim
32 words
The method of claim 2, comprising the step of downloading a new version of the selected application which is more recent than the version of the selected application which has been initiated.
Claim 6
Dependent Claim
18 words
The method of claim 3, wherein the new version of the selected application is downloaded in the background.
Claim 7
Dependent Claim
32 words
The method of claim 2, wherein the step of checking for a more recent version of the selected application is carried out by an application running in parallel with the selected application.
Claim 8
Dependent Claim
26 words
The method of claim 2, wherein the step of checking for a more recent version of the selected application is carried out by the selected application.
Claim 9
Dependent Claim
39 words
The method of claim 2, comprising the step of terminating access to the selected application if there is a version of the selected application which is more recent than the version of the selected application which has been initiated.
Claim 10
Independent Claim
128 words
A method of developing a new version of an application on a system while an old version of the application is running on the system, wherein the system has at least one data server, comprising the steps of: initiating a utility application on the data server; building a new version of the application in the utility creating a tar file which contains the new version of the application; copying the tar file to a predetermined area and in a predetermined format; testing the new version of the application in the copied tar file; and releasing the tested new version of the application to a user, wherein the tar file contains a source code and a set of files for building and executing the new version of the application.
Claim 11
Independent Claim
128 words
A method of developing a new version of an application on a system while an old version of the application is running on the system, wherein the system has at least one data server, comprising the steps of: initiating a utility application on the data server; building a new version of the application in the utility creating a tar file which contains the new version of the application; copying the tar file to a predetermined area and in a predetermined format; testing the new version of the application in the copied tar file; and releasing the tested new version of the application to a user, wherein the tar file contains a source code and a set of files for building and executing the new version of the application.
Claim 12
Independent Claim
125 words
A method of developing a new version of an application and providing that a user uses the new version of the application when selected in a system having at least one data server, comprising the steps of: creating a tar file which contains the new version of the application on at least one data server; copying the tar file to a predetermined area in a predetermined format; testing the new version of the application in the copied tar file; obtaining a set of files for the new version of the application if the user is permitted to use the new version of the application; initiating the application using the files obtained; and checking the initiated application for pending versions during execution of the initiated application.
Claim 13
Independent Claim
125 words
A method of developing a new version of an application and providing that a user uses the new version of the application when selected in a system having at least one data server, comprising the steps of: creating a tar file which contains the new version of the application on at least one data server; copying the tar file to a predetermined area in a predetermined format; testing the new version of the application in the copied tar file; obtaining a set of files for the new version of the application if the user is permitted to use the new version of the application; initiating the application using the files obtained; and checking the initiated application for pending versions during execution of the initiated application.
Claim 14
Independent Claim
168 words
A method of controlling user access to system resources, comprising the steps of: obtaining an identification of a user; obtaining a request of the user to initiate a resource access function for accessing a resource; determining if the user is permitted to initiate the requested resource access function, including the sub-steps of: accessing a directed acyclic graph structure, said directed acyclic graph structure having a plurality of capabilities arranged in a plurality of levels, wherein each capability of a lowest level represents a permission to perform a corresponding resource access function, wherein each capability of successively higher levels contains at least one capability of a preceding level, and wherein each capability of a highest level is granted to at least one user, and using the identification of the user to determine which capabilities the user is granted in accordance with the directed acyclic graph structure; and performing the requested resource access function if it is determined that the user is permitted to initiate the requested resource access function.
Claim 15
Independent Claim
168 words
A method of controlling user access to system resources, comprising the steps of: obtaining an identification of a user; obtaining a request of the user to initiate a resource access function for accessing a resource; determining if the user is permitted to initiate the requested resource access function, including the sub-steps of: accessing a directed acyclic graph structure, said directed acyclic graph structure having a plurality of capabilities arranged in a plurality of levels, wherein each capability of a lowest level represents a permission to perform a corresponding resource access function, wherein each capability of successively higher levels contains at least one capability of a preceding level, and wherein each capability of a highest level is granted to at least one user, and using the identification of the user to determine which capabilities the user is granted in accordance with the directed acyclic graph structure; and performing the requested resource access function if it is determined that the user is permitted to initiate the requested resource access function.
Claim 16
Dependent Claim
41 words
The method of claim 10, wherein there are at least two users and the users are grouped into at least two groups and wherein at least one capability is granted to each group in accordance with the directed acyclic graph structure.
Claim 17
Dependent Claim
36 words
The method of claim 11, wherein information relating to the groups of users is included in a group table and information relating to the directed acyclic graph structure is included in a directed acyclic graph table.
Claim 18
Dependent Claim
14 words
The method of claim 11, wherein each user is a member of one group.
Claim 19
Dependent Claim
20 words
The method of claim 10, wherein a capability of a given level contains two capabilities of an immediately lower level.
Claim 20
Dependent Claim
11 words
The method of claim 10, wherein the resource is a database.
Claim 21
Dependent Claim
16 words
The method of claim 10, wherein the resource access function includes reading data in the database.
Claim 22
Dependent Claim
16 words
The method of claim 10, wherein the resource access function includes writing data to the database.
References Cited (Backward Citations)
US4698752A
Cited
US4651279A
Cited
US4731734A
Cited
US4558413A
Cited
US4791565A
Cited
US5261042A
Cited
US4937863A
Cited
US4924378A
Cited
US5155847A
Cited
US5023907A
Cited
US5321841A
Cited
US5127099A
Cited
US5163147A
Cited
US5325478A
Cited
US5138712A
Cited
US5495610A
Cited
US5263165A
Cited
US5274806A
Cited
US5280619A
Cited
US5440730A
Cited
US5220604A
Cited
US5317729A
Cited
US5493682A
Cited
US5261102A
Cited
US5396621A
Cited
US5204897A
Cited
US5481700A
Cited
US5280612A
Cited
US5276901A
Cited
US5265211A
Cited
US5442791A
Cited
US5754864A
Cited
US5375244A
Cited
US5446903A
Cited
US5432934A
Cited
US5642503A
Cited
US5758340A
Cited
US5832483A
Cited
US5708812A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2002-10-11 | 2003-04-12 | 2003-10-12 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2006-10-11 | 2007-04-12 | 2007-10-12 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2010-10-11 | 2011-04-12 | 2011-10-12 | $7700.00 | Window Closed / Lapsed |