Importance

Loading Importance Indicators...

Abstract

A method and system for protecting objects stored on network servers are presented. An object server runs computer software that designates which objects are to be protected and the security policy for that object. If the object server receives a request for a protected object, the object server creates an enhanced request containing cryptographically protected data related to the request and to the requested object; this enhanced request is redirected to a security server. The security server authenticates the request, retrieves the requested object from the object server, a file server associated with the security server, or a local cache, encrypts the object, and combines the encrypted object with mobile code, the security policy, and object controls to implement the policy. This package is then sent to the requester, which executes the mobile code, resulting in the installation of the security policy and object controls on the requester computer. The requested object is rendered subject to the security policy and object controls. The security server maintains a logfile of actions taken on the object. This logfile can be used to create an audit trail for the object.

Loading the Abstract Image...

First Claim