US6167522A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and apparatus for providing security for servers executing application programs received via a network
Assignee: Oracle America Inc
•
Filing: 1997-04-01
•
Granted: 2000-12-26
•
Expires: 2017-04-01
Abstract
Abstract A method and apparatus for providing security to a server running an application program received over a network is provided. The application program, along with a source identifier is received from a source computer. Access privileges to server resources are granted based on the source identifier. The application program is loaded into a predetermined, bounded region of memory.
Inventors
- 👤 Jong Y. Lee
- 👤 Satish K. Dharmaraj
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-24 00:09
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/10; H04L63/101; G; G06; G06F; G06F21/00; G06F21/50; G06F21/52; G06F21/53; G06F12/00; G06F12/14; G06F12/1458; G06F12/1483; G06F2221/00; G06F2221/03; G06F2221/033; G06F2221/21; G06F2221/2129; G06F2221/2141; G06F2221/2149; H04L63/14; H04L63/1441; H04L63/145
Claims Analysis
Total Claims: 26
Claim 1
Independent Claim
67 words
A method comprising: receiving a servlet from a source computer, wherein the servlet has an associated source identifier that uniquely identifies a sponsor of the servlet in a secure manner; and granting one or more access privileges to resources to be provided by a server to the servlet, wherein the access privileges are individually determined for each resource based, at least in part, on the source identifier.
Claim 2
Independent Claim
67 words
A method comprising: receiving a servlet from a source computer, wherein the servlet has an associated source identifier that uniquely identifies a sponsor of the servlet in a secure manner; and granting one or more access privileges to resources to be provided by a server to the servlet, wherein the access privileges are individually determined for each resource based, at least in part, on the source identifier.
Claim 3
Dependent Claim
13 words
The method of claim 1, wherein the source identifier is a digital signature.
Claim 4
Dependent Claim
42 words
The method of claim 1, wherein determining resources to be provided for use by the application program based on the source identifier comprises checking an access control list (ACL) to determine the resources available to the servlet based on the source identifier.
Claim 5
Dependent Claim
31 words
The method of claim 1, wherein the access privileges comprise one or more of: server disk read privileges; server disk write privileges; server network read privileges; and server network write privileges.
Claim 6
Dependent Claim
27 words
The method of claim 1, wherein the access privileges comprise one or more of: execution privileges; system property access privileges; socket connect privileges; and socket listen privileges.
Claim 7
Dependent Claim
13 words
The method of claim 1, wherein the source identifier identifies the source computer.
Claim 8
Dependent Claim
18 words
The method of claim 1, wherein the source identifier identifies a computer that is not the source computer.
Claim 9
Independent Claim
112 words
A method for providing a servlet for execution on a remote server, wherein the server allocates local resource access based on a source of the servlet, the method comprising: generating the servlet; compiling the servlet into a plurality of predetermined length codes; generating a source identifier; associating the source identifier with the codes; and sending the codes and the source identifier to a server, wherein the server verifies the codes and allocates access privileges to local resources based on the source identifier, the access privileges are individually determined for each resource based, at least in part on the source identifier, her wherein the server generates the servlet based on the codes received.
Claim 10
Independent Claim
112 words
A method for providing a servlet for execution on a remote server, wherein the server allocates local resource access based on a source of the servlet, the method comprising: generating the servlet; compiling the servlet into a plurality of predetermined length codes; generating a source identifier; associating the source identifier with the codes; and sending the codes and the source identifier to a server, wherein the server verifies the codes and allocates access privileges to local resources based on the source identifier, the access privileges are individually determined for each resource based, at least in part on the source identifier, her wherein the server generates the servlet based on the codes received.
Claim 11
Dependent Claim
13 words
The method of claim 8, wherein the source identifier comprises a digital signature.
Claim 12
Dependent Claim
18 words
The method of claim 8, wherein the plurality of predetermined length codes comprises a plurality of byte-length codes.
Claim 13
Dependent Claim
31 words
The method of claim 8, wherein the access privileges comprise one or more of: server disk read privileges; server disk write privileges; server network read privileges; and server network write privileges.
Claim 14
Dependent Claim
27 words
The method of claim 8, wherein the access privileges comprise one or more of: execution privileges; system property access privileges, socket connect privileges; and socket listen privileges.
Claim 15
Dependent Claim
13 words
The method of claim 8, wherein the source identifier identifies the source computer.
Claim 16
Dependent Claim
18 words
The method of claim 8, wherein the source identifier identifies a computer that is not the source computer.
Claim 17
Independent Claim
86 words
An apparatus for loading a servlet received from a source computer for use on a server, the apparatus comprising: means for receiving the servlet from a source computer, wherein the servlet has associated with it a source identifier that uniquely identifies a sponsor of the servlet in a secure manner; granting one or more access privileges to resources to be provided by the server to the servlet, wherein the access privileges are individually determined for each resource based, at least in part, on the source identifier.
Claim 18
Independent Claim
86 words
An apparatus for loading a servlet received from a source computer for use on a server, the apparatus comprising: means for receiving the servlet from a source computer, wherein the servlet has associated with it a source identifier that uniquely identifies a sponsor of the servlet in a secure manner; granting one or more access privileges to resources to be provided by the server to the servlet, wherein the access privileges are individually determined for each resource based, at least in part, on the source identifier.
Claim 19
Dependent Claim
13 words
The apparatus of claim 15 wherein the source identifier comprises a digital signature.
Claim 20
Dependent Claim
25 words
The apparatus of claim 16, wherein the means for determining resources accessible by the server comprises an access control list (ACL) maintained on the server.
Claim 21
Dependent Claim
87 words
A machine readable medium having stored thereon data representing sequences of instructions, which when executed by a processor, cause the processor to: receive a servlet from a source computer, wherein the servlet has associated with it a source identifier that uniquely identifies a sponsor of the servlet in a secure manner; grant one or more access privileges to resources to be provided by the server to the servlet, wherein the access privileges are individually determined for each resource based, at least in part, on the source identifier.
Claim 22
Dependent Claim
87 words
A machine readable medium having stored thereon data representing sequences of instructions, which when executed by a processor, cause the processor to: receive a servlet from a source computer, wherein the servlet has associated with it a source identifier that uniquely identifies a sponsor of the servlet in a secure manner; grant one or more access privileges to resources to be provided by the server to the servlet, wherein the access privileges are individually determined for each resource based, at least in part, on the source identifier.
Claim 23
Dependent Claim
15 words
The machine readable medium of claim 18, wherein the source identifier comprises a digital signature.
Claim 24
Dependent Claim
65 words
The machine readable medium of claim 18, wherein the sequence of instructions that cause the processor to determine resources accessible by the server to be provided for use by the servlet based on the source identifier further comprises sequences of instructions that cause the processor to check an access control list (ACL) to determine the resources available to the servlet based on the source identifier.
Claim 25
Dependent Claim
33 words
The machine readable medium of claim 18, wherein the access privileges comprise one or more of: server disk read privileges; server disk write privileges; server network read privileges; and server network write privileges.
Claim 26
Dependent Claim
29 words
The machine readable medium of claim 18, wherein the access privileges comprise one or more of: execution privileges; system property access privileges; socket connect privileges; and socket listen privileges.
References Cited (Backward Citations)
EP0409397A2
Cited
US5421006A
Cited
EP0570123A1
Cited
EP0580350A1
Cited
US5720033A
Cited
US5692047A
Cited
US5928323A
Cited
US5825877A
Cited
US5958051A
Cited
US5892904A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2003-12-26 | 2004-06-26 | 2004-12-26 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2007-12-26 | 2008-06-26 | 2008-12-26 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2011-12-26 | 2012-06-26 | 2012-12-26 | $7700.00 | Window Closed / Lapsed |