ES2128393T3 - Metodo y aparato para sistemas de ordenador con estructuras de datos de informacion para programas de autorizacion. - Google Patents

Metodo y aparato para sistemas de ordenador con estructuras de datos de informacion para programas de autorizacion.

Info

Publication number
ES2128393T3
ES2128393T3 ES93303223T ES93303223T ES2128393T3 ES 2128393 T3 ES2128393 T3 ES 2128393T3 ES 93303223 T ES93303223 T ES 93303223T ES 93303223 T ES93303223 T ES 93303223T ES 2128393 T3 ES2128393 T3 ES 2128393T3
Authority
ES
Spain
Prior art keywords
program
pai
executed
limits
system monitor
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Lifetime
Application number
ES93303223T
Other languages
English (en)
Inventor
Addison M Fischer
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Individual
Original Assignee
Individual
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from US07/883,868 external-priority patent/US5412717A/en
Application filed by Individual filed Critical Individual
Application granted granted Critical
Publication of ES2128393T3 publication Critical patent/ES2128393T3/es
Anticipated expiration legal-status Critical
Expired - Lifetime legal-status Critical Current

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/52—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
    • G06F21/54—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow by adding security routines or objects to programs
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2211/00—Indexing scheme relating to details of data-processing equipment not covered by groups G06F3/00 - G06F13/00
    • G06F2211/007—Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2141—Access rights, e.g. capability lists, access control lists, access tables, access matrices
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2145—Inheriting rights or properties, e.g., propagation of permissions or restrictions within a hierarchy
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2149—Restricted operating environment

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Software Systems (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Storage Device Security (AREA)
  • Stored Programmes (AREA)

Abstract

SE PRESENTAN UN METODO Y APARATO QUE INCLUYE UN CONTROLADOR DEL SISTEMA QUE LIMITA LA CAPACIDAD DE UN SISTEMA QUE SE VA A EJECUTAR AL USO DE UNOS RECURSOS PREDEFINIDOS (EJ. ARCHIVOS DE DATOS, POSIBILIDADES DE ESCRITURA DEL DISCO, ETC.). EL CONTROLADOR DEL SISTEMA PROCESA UNA ESTRUCTURA DE DATOS QUE INCLUYE UN GRUPO DE AUTORIDADES QUE DEFINEN QUE ES LO QUE PUEDE HACER EL PROGRAMA Y/O QUE NO PUEDE HACER. EL GRUPO DE AUTORIDADES Y/O RESTRICCIONES ASIGNADAS A UN PROGRAMA A EJECUTAR RECIBEN EL CALIFICATIVO DE "INFORMACION DE AUTORIZACION DEL PROGRAMA" (O "PAI"). UNA VEZ DEFINIDA, LA INFORMACION DE AUTORIZACION DEL PROGRAMA SE ASOCIA A POR LO MENOS UN PROGRAMA A EJECUTAR PARA ASI DELIMITAR LOS RECURSOS Y FUNCIONES QUE PUEDE UTILIZAR EL PROGRAMA Y/O QUE NO PUEDE UTILIZAR. LA PAI ASOCIADA A UN PROGRAMA PARTICULAR PUEDE SER ASIGNADA POR EL PROPIETARIO/USUARIO DE UN SISTEMA DE ORDENADOR O POR ALGUIEN EN QUIEN EL PROPIETARIO/USUARIO DEL SISTEMA DE ORDENADOR CONFIA ABSOLUTAMENTE. LA PAI SOLO PERMITE QUE UN PROGRAMA ASOCIADO ACCEDA A AQUELLO PARA LO QUE HA SIDO AUTORIZADO Y A NADA MAS. SE PUEDE CONSIDERAR QUE EL PROGRAMA HA SIDO COLOCADO EN UNA "CAJA DE SEGURIDAD" LIMITADORA DE LA CAPACIDAD DEL PROGRAMA. ESTA "CAJA DE SEGURIDAD" SE ASOCIA DESPUES AL PROGRAMA DE TAL MODO QUE CUANDO EL CONTROLADOR DEL SISTEMA EJECUTA EL PROGRAMA, LA PAI RELATIVA A ESE PROGRAMA SE CARGA Y CONTROLA TAMBIEN. CUANDO EL PROGRAMA VAYA A LLEVAR A CABO UNA FUNCION O ACCEDER A UN RECURSO, LA PAI ASOCIADA ES CONTROLADA PARA CONFIRMAR QUE LA OPERACION SE ENCUENTRA DENTRO DE LOS LIMITES DEL PROGRAMA DEFINIDOS. EL PROGRAMA NO PUEDE HACER NADA QUE SE SALGA DE LOS LIMITES AUTORIZADOS.
ES93303223T 1992-05-15 1993-04-26 Metodo y aparato para sistemas de ordenador con estructuras de datos de informacion para programas de autorizacion. Expired - Lifetime ES2128393T3 (es)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US88386792A 1992-05-15 1992-05-15
US07/883,868 US5412717A (en) 1992-05-15 1992-05-15 Computer system security method and apparatus having program authorization information data structures

Publications (1)

Publication Number Publication Date
ES2128393T3 true ES2128393T3 (es) 1999-05-16

Family

ID=27128706

Family Applications (1)

Application Number Title Priority Date Filing Date
ES93303223T Expired - Lifetime ES2128393T3 (es) 1992-05-15 1993-04-26 Metodo y aparato para sistemas de ordenador con estructuras de datos de informacion para programas de autorizacion.

Country Status (7)

Country Link
EP (1) EP0570123B1 (es)
JP (2) JP3784423B2 (es)
AT (1) ATE177857T1 (es)
AU (1) AU672786B2 (es)
CA (1) CA2095087C (es)
DE (1) DE69323926T2 (es)
ES (1) ES2128393T3 (es)

Families Citing this family (64)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
NZ329891A (en) * 1994-01-13 2000-01-28 Certco Llc Method of upgrading firmware of trusted device using embedded key
US5553143A (en) * 1994-02-04 1996-09-03 Novell, Inc. Method and apparatus for electronic licensing
US5553139A (en) * 1994-04-04 1996-09-03 Novell, Inc. Method and apparatus for electronic license distribution
US5473692A (en) * 1994-09-07 1995-12-05 Intel Corporation Roving software license for a hardware agent
US5802275A (en) * 1994-06-22 1998-09-01 Lucent Technologies Inc. Isolation of non-secure software from secure software to limit virus infection
JPH08137686A (ja) * 1994-09-16 1996-05-31 Toshiba Corp 著作物データ管理方法及び著作物データ管理装置
US5715403A (en) * 1994-11-23 1998-02-03 Xerox Corporation System for controlling the distribution and use of digital works having attached usage rights where the usage rights are defined by a usage rights grammar
DE69521977T2 (de) * 1994-12-13 2002-04-04 International Business Machines Corp., Armonk Verfahren und System zur gesicherten Programmenverteilung
US7124302B2 (en) 1995-02-13 2006-10-17 Intertrust Technologies Corp. Systems and methods for secure transaction management and electronic rights protection
US6948070B1 (en) 1995-02-13 2005-09-20 Intertrust Technologies Corporation Systems and methods for secure transaction management and electronic rights protection
US5892900A (en) 1996-08-30 1999-04-06 Intertrust Technologies Corp. Systems and methods for secure transaction management and electronic rights protection
US7165174B1 (en) 1995-02-13 2007-01-16 Intertrust Technologies Corp. Trusted infrastructure support systems, methods and techniques for secure electronic commerce transaction and rights management
US7133846B1 (en) 1995-02-13 2006-11-07 Intertrust Technologies Corp. Digital certificate support system, methods and techniques for secure electronic commerce transaction and rights management
US5943422A (en) 1996-08-12 1999-08-24 Intertrust Technologies Corp. Steganographic techniques for securely delivering electronic digital rights management control information over insecure communication channels
US7143290B1 (en) 1995-02-13 2006-11-28 Intertrust Technologies Corporation Trusted and secure techniques, systems and methods for item delivery and execution
US7133845B1 (en) 1995-02-13 2006-11-07 Intertrust Technologies Corp. System and methods for secure transaction management and electronic rights protection
US6658568B1 (en) 1995-02-13 2003-12-02 Intertrust Technologies Corporation Trusted infrastructure support system, methods and techniques for secure electronic commerce transaction and rights management
CN1312549C (zh) 1995-02-13 2007-04-25 英特特拉斯特技术公司 用于安全交易管理和电子权利保护的系统和方法
US7095854B1 (en) 1995-02-13 2006-08-22 Intertrust Technologies Corp. Systems and methods for secure transaction management and electronic rights protection
US6157721A (en) 1996-08-12 2000-12-05 Intertrust Technologies Corp. Systems and methods using cryptography to protect secure computing environments
US7069451B1 (en) 1995-02-13 2006-06-27 Intertrust Technologies Corp. Systems and methods for secure transaction management and electronic rights protection
US5905860A (en) * 1996-03-15 1999-05-18 Novell, Inc. Fault tolerant electronic licensing system
CA2202118A1 (en) * 1996-04-29 1997-10-29 Mitel Corporation Protected persistent storage access for mobile applications
US5825877A (en) * 1996-06-11 1998-10-20 International Business Machines Corporation Support for portable trusted software
US5987123A (en) * 1996-07-03 1999-11-16 Sun Microsystems, Incorporated Secure file system
US6148083A (en) * 1996-08-23 2000-11-14 Hewlett-Packard Company Application certification for an international cryptography framework
US5841870A (en) * 1996-11-12 1998-11-24 Cheyenne Property Trust Dynamic classes of service for an international cryptography framework
US5920861A (en) * 1997-02-25 1999-07-06 Intertrust Technologies Corp. Techniques for defining using and manipulating rights management data structures
US7062500B1 (en) 1997-02-25 2006-06-13 Intertrust Technologies Corp. Techniques for defining, using and manipulating rights management data structures
US6167522A (en) * 1997-04-01 2000-12-26 Sun Microsystems, Inc. Method and apparatus for providing security for servers executing application programs received via a network
EP1000400A4 (en) * 1997-06-17 2005-04-06 Purdue Pharma Lp SYSTEM FOR THE ELECTRONIC MAIL TRANSMISSION OF MESSAGES AND AUTODETRUISANT DOCUMENTS
US6000032A (en) * 1997-07-15 1999-12-07 Symantec Corporation Secure access to software modules
US6188995B1 (en) 1997-07-28 2001-02-13 Apple Computer, Inc. Method and apparatus for enforcing software licenses
US6711611B2 (en) 1998-09-11 2004-03-23 Genesis Telecommunications Laboratories, Inc. Method and apparatus for data-linking a mobile knowledge worker to home communication-center infrastructure
US6985943B2 (en) 1998-09-11 2006-01-10 Genesys Telecommunications Laboratories, Inc. Method and apparatus for extended management of state and interaction of a remote knowledge worker from a contact center
US7092914B1 (en) 1997-11-06 2006-08-15 Intertrust Technologies Corporation Methods for matching, selecting, narrowcasting, and/or classifying based on rights management and/or other information
IL123512A0 (en) 1998-03-02 1999-03-12 Security 7 Software Ltd Method and agent for the protection against hostile resource use access
US7233948B1 (en) 1998-03-16 2007-06-19 Intertrust Technologies Corp. Methods and apparatus for persistent control and protection of content
EP0993631B1 (en) 1998-05-06 2009-07-22 Sun Microsystems, Inc. Processing apparatus and method
US7243236B1 (en) 1999-07-29 2007-07-10 Intertrust Technologies Corp. Systems and methods for using cryptography to protect secure and insecure computing environments
US7430670B1 (en) 1999-07-29 2008-09-30 Intertrust Technologies Corp. Software self-defense systems and methods
JP2001127747A (ja) * 1999-10-25 2001-05-11 Toshiba Corp 情報暗号化復号化装置
US6757824B1 (en) * 1999-12-10 2004-06-29 Microsoft Corporation Client-side boot domains and boot rules
US6901386B1 (en) * 2000-03-31 2005-05-31 Intel Corporation Electronic asset lending library method and apparatus
US7263616B1 (en) * 2000-09-22 2007-08-28 Ge Medical Systems Global Technology Company, Llc Ultrasound imaging system having computer virus protection
KR20020034862A (ko) * 2000-11-02 2002-05-09 권문상 컴퓨터의 응용프로그램의 비밀값 제어방법
US7099663B2 (en) 2001-05-31 2006-08-29 Qualcomm Inc. Safe application distribution and execution in a wireless environment
DE10140721A1 (de) * 2001-08-27 2003-03-20 Bayerische Motoren Werke Ag Verfahren zur Bereitstellung von Software zur Verwendung durch ein Steuergerät eines Fahrzeugs
JP3818504B2 (ja) * 2002-04-15 2006-09-06 ソニー株式会社 情報処理装置および方法、並びにプログラム
JP4222774B2 (ja) 2002-05-20 2009-02-12 株式会社エヌ・ティ・ティ・ドコモ 携帯端末およびプログラムの起動方法
CN1327343C (zh) 2002-06-12 2007-07-18 松下电器产业株式会社 服务安全扩充平台
CN1732452A (zh) * 2002-10-25 2006-02-08 贝蒂纳·埃克斯珀顿 用于自动启动和访问网络地址和应用程序的系统和方法
RU2234123C1 (ru) * 2002-11-21 2004-08-10 Щеглов Андрей Юрьевич Система разграничения прав доступа к файловым объектам
KR100493900B1 (ko) 2003-08-21 2005-06-10 삼성전자주식회사 사용자간 콘텐츠에 대한 권한정보의 공유방법
US20050091658A1 (en) * 2003-10-24 2005-04-28 Microsoft Corporation Operating system resource protection
WO2005052769A1 (ja) * 2003-11-28 2005-06-09 Matsushita Electric Industrial Co.,Ltd. データ処理装置
US9008075B2 (en) 2005-12-22 2015-04-14 Genesys Telecommunications Laboratories, Inc. System and methods for improving interaction routing performance
JP4995590B2 (ja) 2007-02-14 2012-08-08 株式会社エヌ・ティ・ティ・ドコモ コンテンツ流通管理装置、通信端末、プログラム及びコンテンツ流通システム
US8646050B2 (en) * 2011-01-18 2014-02-04 Apple Inc. System and method for supporting JIT in a secure system with randomly allocated memory ranges
US9690945B2 (en) 2012-11-14 2017-06-27 International Business Machines Corporation Security analysis using relational abstraction of data structures
JP6236816B2 (ja) * 2013-03-15 2017-11-29 株式会社リコー 画像処理システム、情報処理装置及びプログラム
US10694352B2 (en) 2015-10-28 2020-06-23 Activision Publishing, Inc. System and method of using physical objects to control software access
CN116522360A (zh) * 2023-04-27 2023-08-01 麒麟软件有限公司 一种基于Linux的安全套件授权管控方法及系统
GB2644637A (en) * 2024-09-20 2026-04-29 Origin Secured Ltd Permissions

Family Cites Families (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
GB2059652B (en) 1979-09-29 1983-08-24 Plessey Co Ltd Memory protection system using capability registers
AU618056B2 (en) * 1987-11-10 1991-12-12 Acresso Software Inc. Computer program license management system
US5005200A (en) 1988-02-12 1991-04-02 Fischer Addison M Public key/signature cryptosystem with enhanced digital signature certification
JP3049749B2 (ja) * 1990-09-14 2000-06-05 富士通株式会社 ファイルアクセス制限処理装置
AU662805B2 (en) 1992-04-06 1995-09-14 Addison M. Fischer A method for processing information among computers which may exchange messages

Also Published As

Publication number Publication date
EP0570123A1 (en) 1993-11-18
JP3880607B2 (ja) 2007-02-14
JPH06103058A (ja) 1994-04-15
JP3784423B2 (ja) 2006-06-14
AU672786B2 (en) 1996-10-17
DE69323926T2 (de) 1999-09-30
CA2095087C (en) 1999-06-01
AU3820993A (en) 1993-11-18
CA2095087A1 (en) 1993-11-16
JP2006099805A (ja) 2006-04-13
EP0570123B1 (en) 1999-03-17
ATE177857T1 (de) 1999-04-15
DE69323926D1 (de) 1999-04-22

Similar Documents

Publication Publication Date Title
ES2128393T3 (es) Metodo y aparato para sistemas de ordenador con estructuras de datos de informacion para programas de autorizacion.
Karger Limiting the damage potential of discretionary Trojan horses
CA1252907A (en) Secure data processing system architecture with format control
US7290279B2 (en) Access control method using token having security attributes in computer system
US5283830A (en) Security mechanism for a computer system
CA2025434A1 (en) Method for protecting against the unauthorized use of software in a computer network environment
Abrams RENEWED UNDERSTANDING OF ACCESS CONTROL POLICIES¹
ATE518179T1 (de) Sicherheitsmodell mit beschränkten token
EP0729252A3 (en) Cryptographic key management
US6253251B1 (en) Information handling system, method, and article of manufacture including integration of object security service authorization with a distributed computing environment
TW373150B (en) Apparatus and method for computer resources access control
DE69707022D1 (de) System und verfahren zur sicheren verwaltung von desktop-umgebungen über ein netzwerk
Friedman The authorization problem in shared files
KR950012736B1 (ko) 단말기 보안등급을 이용한 시스템 사용 제한 방법
KR930004434B1 (ko) 다중 등급기밀 데이타 보호용 액세스 제어방법
KR100519697B1 (ko) 신분 기반을 이용한 접근 제어 시스템의 접근 제어 방법
EP0426595A2 (en) Method of permitting access of shared resources using user set definition to support affinity and surrogate user relations
JP4636040B2 (ja) ファイル管理システム及びファイル管理方法、並びにファイル管理プログラム
CN109522734B (zh) 一种安全应用商店系统
Stamm Controlling Access
Lloyd The Role of Risk Analysis in the Control of Major Hazards
Hu et al. Computer Security
JPS62231351A (ja) フアイル保護方式
JP2023114916A (ja) アクセス権限制御装置、アクセス権限制御方法およびプログラム
Marchant et al. Common access control terminology used in multilevel security systems

Legal Events

Date Code Title Description
FG2A Definitive protection

Ref document number: 570123

Country of ref document: ES