US Patent No: 5,859,966
Number of patents in Portfolio can not be more than 2000
Security system for computer systems
Stats
-
Jan 12, 1999
Issued date -
Oct 10, 1995
filing date -
08/541,636
serial no -
In Force
status (Latency Note)
Importance
Abstract
A security system for a computer system imposes specific limitations on who has access to the computer system and to exactly what operations and data. Viruses are securely contained and prevented from expanding into areas where they can destroy stored programs or data. Viruses are also prevented from being introduced or executed in a large number of instances. The totality of computer functions is broken up into a set of events with an associated set of capabilities and different capabilities are assigned to each user depending on the particular job which that user is to do on the computer system. Also, security labels are placed on each data file and other system resources, and on each process. Further, a range of hierarchy/category labels (MAC labels) is assigned to each process to define a sub-lattice in which special capabilities can apply. Further, the hierarchy of labels is divided into a small number (for example 3) of regions, and a process operating in one region is generally not allowed to cross over into another region. Further, an owner of a data file is allowed to place restrictions on the file so that only users who posses certain privileges can gain access to the file.
First Claim
Family
International Classification(s)
Cited Art Landscape
| Patent Info | (Count) | # Cites | Year |
|---|---|---|---|
|
|
|||
| * 5,355,474 System for multilevel secure database management using a knowledge base with release-based and other security constraints for query, response and update modification | 241 | 1991 | |
| * 5,481,700 Apparatus for design of a multilevel secure database management system based on a multilevel logic programming system | 114 | 1991 | |
|
|
|||
| * 5,375,244 System and method for granting access to a resource | 158 | 1992 | |
|
|
|||
| * 5,204,961 Computer network operating with multilevel hierarchical security with selectable common trust realms and corresponding security protocols | 240 | 1990 | |
|
|
|||
| * 5,432,934 Access restrictions as a means of configuring a user interface and making an application secure | 45 | 1993 | |
|
|
|||
| * 5,504,814 Efficient security kernel for the 80960 extended architecture | 234 | 1994 | |
|
|
|||
| * 5,263,147 System for providing high security for personal computers and workstations | 75 | 1991 | |
|
|
|||
| * 4,442,484 Microprocessor memory management and protection mechanism | 175 | 1980 | |
|
|
|||
| * 5,339,403 Access control in a distributed computer system | 74 | 1993 | |
|
|
|||
| * 5,469,556 Resource access security system for controlling access to resources of a data processing system | 48 | 1992 | |
|
|
|||
| * 5,335,346 Access control policies for an object oriented database, including access control lists which span across object boundaries | 269 | 1991 | |
|
|
|||
| * 5,455,953 Authorization system for obtaining in single step both identification and access rights of client to server directly from encrypted authorization ticket | 418 | 1993 | |
|
|
|||
| * 5,283,828 Architecture for utilizing coprocessing systems to increase performance in security adapted computer systems | 66 | 1993 | |
|
|
|||
| * 5,577,209 Apparatus and method for providing multi-level security for communication among computers and terminals on a network | 271 | 1994 | |
|
|
|||
| * 4,713,753 Secure data processing system architecture with format control | 313 | 1985 | |
|
|
|||
| * 5,572,673 Secure multi-level system for executing stored procedures | 161 | 1993 | |
|
|
|||
| * 5,265,221 Access restriction facility method and apparatus | 139 | 1992 | |
|
|
|||
| * 5,121,345 System and method for protecting integrity of computer data and software | 144 | 1990 | |