US6330677B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Object-based security system
Assignee: Sprint Communications Co LP
•
Filing: 1998-10-27
•
Granted: 2001-12-11
•
Expires: 2018-10-27
Abstract
Abstract The invention authenticates processes and inter-process messaging. In some examples of the invention, security is performed in three layers—the application layer, the middleware layer, and the transport layer. Some examples of the invention include software products. One software product comprises security software and middleware software stored on a software storage medium. The security software directs a processor to receive a log-in request for a process, generate a request to authenticate the process, transfer the request to authenticate the process, receive a security association for the process, and transfer the security association. The middleware software directs the processor to receive the security association from the security software, receive a message from the process, insert the security association into the message, and transfer the message. Another software product comprises security software stored on a software storage medium. The security software directs a processor to receive a request to authenticate a process, authenticate the process, generate a security association for the process, store the security association, transfer the security association, receive the security association extracted from a message, and check the security association extracted from the message with the stored security association to authenticate the message.
Inventors
- 👤 Ashraf T. Madoukh
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-06 11:48
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/04; H04L63/0428; H04L63/0442; G; G06; G06F; G06F21/00; G06F21/30; G06F21/44; G06F21/445; H04L63/08; H04L63/0823; H04L63/083
Claims Analysis
Total Claims: 33
Claim 1
Independent Claim
136 words
A method for operating a first computer system, a second computer system, and a security system, wherein the first computer system comprises a process, a security object, and first middleware, and wherein the second computer system comprises second middleware, the method comprising: receiving a message from the process into the first middleware for transfer to the second computer system; in the first middleware, inserting a security association into the message; transferring the message from the first middleware; receiving the message from the first middleware into the second middleware; in the second middleware, extracting the security association from the message; transferring the security association from the second middleware; receiving the security association from the second middleware into the security system; and checking security association extracted from the message with the stored security association to authenticate the message.
Claim 2
Independent Claim
136 words
A method for operating a first computer system, a second computer system, and a security system, wherein the first computer system comprises a process, a security object, and first middleware, and wherein the second computer system comprises second middleware, the method comprising: receiving a message from the process into the first middleware for transfer to the second computer system; in the first middleware, inserting a security association into the message; transferring the message from the first middleware; receiving the message from the first middleware into the second middleware; in the second middleware, extracting the security association from the message; transferring the security association from the second middleware; receiving the security association from the second middleware into the security system; and checking security association extracted from the message with the stored security association to authenticate the message.
Claim 3
Dependent Claim
86 words
The method of claim 1 further comprising: transferring a log-in request from the process to the security object; transferring a request to authenticate the process from the security object; receiving the request to authenticate the process into the security system; in the security system, authenticating the process and generating the security association; storing the security association and transferring the security association from the security system; receiving the security association into the security object; and transferring the security association from the security object to the first middleware.
Claim 4
Dependent Claim
13 words
The method of claim 2 wherein the process is a graphical user interface.
Claim 5
Dependent Claim
13 words
The method of claim 2 wherein the process is a communications provider agent.
Claim 6
Dependent Claim
13 words
The method of claim 2 wherein the process is a communications user agent.
Claim 7
Dependent Claim
18 words
The method of claim 2 wherein wherein the security object includes a Common Object Request Broker Architecture interface.
Claim 8
Dependent Claim
14 words
The method of claim 2 wherein the first middleware is an Object Request Broker.
Claim 9
Dependent Claim
25 words
The method of claim 7 wherein inserting the security association in the message comprises using an Object Request Broker interceptor to insert the security association.
Claim 10
Dependent Claim
14 words
The method of claim 2 wherein the second middleware is an Object Request Broker.
Claim 11
Dependent Claim
25 words
The method of claim 9 wherein extracting the security association in the message comprises using an Object Request Broker interceptor to extract the security association.
Claim 12
Dependent Claim
49 words
The method of claim 2 wherein the process has a private key, a public key, and a password, the method further comprising: transferring the password from the process to the security object; in the security object, encrypting the private key with the password; and storing the encrypted private key.
Claim 13
Dependent Claim
59 words
The method of claim 11 wherein the log-in request includes the password and further comprising: in the security object, decrypting the private key with the password; in the security object, encrypting a value with the private key; and wherein transferring the request to authenticate the process further comprises transferring the value and the encrypted value from the security object.
Claim 14
Dependent Claim
35 words
The method of claim 2 wherein authenticating the process in the security system further comprises: decrypting the value with the public key; and comparing the decrypted value with the value in the request to authenticate.
Claim 15
Dependent Claim
147 words
The method of claim 1 wherein the first computer system further comprises a first transport layer and the second computer system further comprises a second transport layer, the method further comprising: transferring the security association from the security object to the first transport layer; receiving the message from the first middleware into the first transport layer for transfer to the second computer system; in the first transport layer, inserting the security association into the message; transferring the message from the first transport layer; receiving the message from the first transport layer into the second transport layer; in the second transport layer, extracting the security association from the message; transferring the security association from the second transport layer; receiving the security association from the second transport layer into the security system; and checking security association extracted from the message with the stored security association to authenticate the message.
Claim 16
Dependent Claim
19 words
The method of claim 14 wherein the first transport layer and the second transport layer are asynchronous transfer mode.
Claim 17
Dependent Claim
18 words
The method of claim 14 wherein the first transport layer and the second transport layer are internet protocol.
Claim 18
Dependent Claim
103 words
A software product comprising: security software operational when executed by a processor to direct the processor to receive a log-in request for a process, generate a request to authenticate the process, transfer the request to authenticate the process, receive a security association for the process, and transfer the security association; middleware software operational when executed by the processor to direct the processor to receive the security association from the security software, receive a message from the process, insert the security association into the message, and transfer the message; and a software storage medium operational to store the security software and the middleware software.
Claim 19
Dependent Claim
103 words
A software product comprising: security software operational when executed by a processor to direct the processor to receive a log-in request for a process, generate a request to authenticate the process, transfer the request to authenticate the process, receive a security association for the process, and transfer the security association; middleware software operational when executed by the processor to direct the processor to receive the security association from the security software, receive a message from the process, insert the security association into the message, and transfer the message; and a software storage medium operational to store the security software and the middleware software.
Claim 20
Dependent Claim
18 words
The software product of claim 17 wherein the security software includes a Common Object Request Broker Architecture interface.
Claim 21
Dependent Claim
15 words
The software product of claim 18 wherein the middleware software is an Object Request Broker.
Claim 22
Dependent Claim
34 words
The software product of claim 19 wherein the middleware software is further operational when executed by the processor to direct the processor to use an Object Request Broker interceptor to insert the security association.
Claim 23
Dependent Claim
44 words
The software product of claim 17 wherein the middleware software is further operational when executed by the processor to direct the processor to receive another message from another process, to extract another security association from the other message, and transfer the other security association.
Claim 24
Dependent Claim
35 words
The software product of claim 21 wherein the middleware software is further operational when executed by the processor to direct the processor to use an Object Request Broker interceptor to extract the other security association.
Claim 25
Dependent Claim
37 words
The software product of claim 17 wherein the security software is further operational when executed by the processor to direct the processor to encrypt a private key with a password and to store the encrypted private key.
Claim 26
Dependent Claim
47 words
The software product of claim 23 wherein the security software is further operational when executed by the processor to direct the processor to decrypt the private key with the password, to encrypt a value with the private key, and to transfer the value and the encrypted value.
Claim 27
Dependent Claim
52 words
The software product of claim 17 further comprising transport software operational when executed by the processor to direct the processor to receive the message from the middleware software, insert the security association into the message, and transfer the message, and wherein the storage medium is further operational to store the transport software.
Claim 28
Dependent Claim
40 words
The software product of claim 25 wherein the transport software is further operational when executed by the processor to direct the processor to receive another message, extract another security association from the other message, and transfer the other security association.
Claim 29
Dependent Claim
15 words
The software product of claim 26 wherein the transport software is asynchronous transfer mode software.
Claim 30
Dependent Claim
14 words
The software product of claim 26 wherein the transport software is internet protocol software.
Claim 31
Dependent Claim
79 words
A software product comprising: security software operational when executed by a processor to direct the processor to receive a request to authenticate a process, authenticate the process, generate a security association for the process, store the security association, transfer the security association, receive the security association extracted from a message, and check the security association extracted from the message with the stored security association to authenticate the message; and a software storage medium operational to store the security software.
Claim 32
Dependent Claim
79 words
A software product comprising: security software operational when executed by a processor to direct the processor to receive a request to authenticate a process, authenticate the process, generate a security association for the process, store the security association, transfer the security association, receive the security association extracted from a message, and check the security association extracted from the message with the stored security association to authenticate the message; and a software storage medium operational to store the security software.
Claim 33
Dependent Claim
43 words
The software product of claim 29 wherein the security software is further operational when executed by the processor to direct the processor to decrypt a value with a public key, and compare the decrypted value with a value in the request to authenticate.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2004-12-10 | 2005-06-11 | 2005-12-11 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2008-12-10 | 2009-06-11 | 2009-12-11 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2012-12-10 | 2013-06-11 | 2013-12-11 | $7700.00 | Window Closed / Lapsed |