US Patent No: 5,859,966
Number of patents in Portfolio can not be more than 2000
Security system for computer systems
Stats
-
Jan 12, 1999
Issued date -
Oct 10, 1995
filing date -
-
08/541,636
serial no -
In Force
status (Note)
Importance
Abstract
A security system for a computer system imposes specific limitations on who has access to the computer system and to exactly what operations and data. Viruses are securely contained and prevented from expanding into areas where they can destroy stored programs or data. Viruses are also prevented from being introduced or executed in a large number of instances. The totality of computer functions is broken up into a set of events with an associated set of capabilities and different capabilities are assigned to each user depending on the particular job which that user is to do on the computer system. Also, security labels are placed on each data file and other system resources, and on each process. Further, a range of hierarchy/category labels (MAC labels) is assigned to each process to define a sub-lattice in which special capabilities can apply. Further, the hierarchy of labels is divided into a small number (for example 3) of regions, and a process operating in one region is generally not allowed to cross over into another region. Further, an owner of a data file is allowed to place restrictions on the file so that only users who posses certain privileges can gain access to the file.
First Claim
Family
International Classification(s)
Cited Art Landscape
| Patent Info | (Count) | # Cites | Year |
|---|---|---|---|
|
|
|||
| * 5,121,345 System and method for protecting integrity of computer data and software | 144 | 1990 | |
|
|
|||
| * 5,572,673 Secure multi-level system for executing stored procedures | 161 | 1993 | |
|
|
|||
| * 5,263,147 System for providing high security for personal computers and workstations | 75 | 1991 | |
|
|
|||
| * 5,469,556 Resource access security system for controlling access to resources of a data processing system | 48 | 1992 | |
|
|
|||
| * 4,713,753 Secure data processing system architecture with format control | 315 | 1985 | |
|
|
|||
| * 5,204,961 Computer network operating with multilevel hierarchical security with selectable common trust realms and corresponding security protocols | 241 | 1990 | |
|
|
|||
| * 5,335,346 Access control policies for an object oriented database, including access control lists which span across object boundaries | 269 | 1991 | |
|
|
|||
| * 5,504,814 Efficient security kernel for the 80960 extended architecture | 234 | 1994 | |
|
|
|||
| * 5,265,221 Access restriction facility method and apparatus | 139 | 1992 | |
|
|
|||
| * 5,339,403 Access control in a distributed computer system | 74 | 1993 | |
|
|
|||
| * 5,577,209 Apparatus and method for providing multi-level security for communication among computers and terminals on a network | 273 | 1994 | |
|
|
|||
| * 5,355,474 System for multilevel secure database management using a knowledge base with release-based and other security constraints for query, response and update modification | 241 | 1991 | |
| * 5,481,700 Apparatus for design of a multilevel secure database management system based on a multilevel logic programming system | 114 | 1991 | |
|
|
|||
| * 4,442,484 Microprocessor memory management and protection mechanism | 175 | 1980 | |
|
|
|||
| * 5,432,934 Access restrictions as a means of configuring a user interface and making an application secure | 45 | 1993 | |
|
|
|||
| * 5,283,828 Architecture for utilizing coprocessing systems to increase performance in security adapted computer systems | 66 | 1993 | |
|
|
|||
| * 5,455,953 Authorization system for obtaining in single step both identification and access rights of client to server directly from encrypted authorization ticket | 420 | 1993 | |
|
|
|||
| * 5,375,244 System and method for granting access to a resource | 158 | 1992 | |