Method and apparatus for dynamic server provisioning

• US 20020120868A1
• Filed: 02/27/2001
• Published: 08/29/2002
• Est. Priority Date: 02/27/2001
• Status: Abandoned Application

• Current Assignee: Micro Electronics Incorporated
• Original Assignee: Micro Electronics Incorporated
• Inventors: Hay, Russell C.
• Application Number:
  US09/796,312
• Publication Number:
  US 20020120868A1
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

One embodiment of the present invention provides a system for dynamic server provisioning, wherein a number of functions are made available through use of loadable modules. The system operates by first receiving an account configuration file specifying modules that an account holder is authorized to access. The system then reads the account configuration file to determine a module allowed for the specific account. After determining an allowed module, the system next recovers a verb table from the allowed module that contains a list of commands available within the allowed module. This verb table is stored in a master verb table which specifies every command authorized for the account holder. Additionally, the master verb table relates verbs to the allowed module. The system next accepts a command from a user. After accepting the command, the system validates the command by looking up the command in the master verb table. If the command is valid, the system executes the command by calling a corresponding function within the allowed module.

Claims

1. A method for dynamic server provisioning, wherein a number of functions are made available through use of loadable modules, comprising:

receiving an account configuration file specifying modules that an account holder is authorized to access;

reading the account configuration file to determine an allowed module that the account holder is authorized to access;

recovering a verb table from the allowed module, wherein the verb table contains a list of commands available in the allowed module;

storing the verb table in a master verb table which specifies every command authorized for the account holder, wherein the master verb table relates a verb to the allowed module;

accepting a command from a user;

validating the command using the master verb table; and

if the command is valid, executing the command by calling a corresponding function within the allowed module.

2. The method of claim 1, further comprising receiving the account configuration file across an encrypted link on a network.

3. The method of claim 1, wherein accepting the command from the user includes:

determining if the command originated from an authorized internet protocol (IP) address; and

if the command did not originate from the authorized IP address, logging an IP error.

4. The method of claim 1, wherein accepting the command from the user includes:

reading a password associated with the command;

verifying the password; and

if the password is not correct, logging a password error.

5. The method of claim 1, wherein validating the command includes:

locating the command in the master verb table; and

if the command is not in the master verb table, logging a command error.

6. The method of claim 1, wherein validating the command includes:

scanning an argument string associated with the command to check for disallowed characters; and

if the argument string contains disallowed characters, logging an argument error.

7. The method of claim 1, further comprising repeating the steps of accepting, validating, and executing until the method is terminated.

8. A computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform a method for dynamic server provisioning, wherein a number of functions are made available through use of loadable modules, the method comprising:

receiving an account configuration file specifying modules that an account holder is authorized to access;

reading the account configuration file to determine an allowed module that the account holder is authorized to access;

recovering a verb table from the allowed module, wherein the verb table contains a list of commands available in the allowed module;

storing the verb table in a master verb table which specifies every command authorized for the account holder, wherein the master verb table relates a verb to the allowed module;

accepting a command from a user;

validating the command using the master verb table; and

if the command is valid, executing the command by calling a corresponding function within the allowed module.

9. The computer-readable storage medium of claim 8, the method further comprises receiving the account configuration file across an encrypted link on a network.

10. The computer-readable storage medium of claim 8, wherein accepting the command from the user includes:

determining if the command originated from an authorized internet protocol (IP) address; and

if the command did not originate from the authorized IP address, logging an IP error.

11. The computer-readable storage medium of claim 8, wherein accepting the command from the user includes:

reading a password associated with the command;

verifying the password; and

if the password is not correct, logging a password error.

12. The computer-readable storage medium of claim 8, wherein validating the command includes:

locating the command in the master verb table; and

if the command is not in the master verb table, logging a command error.

13. The computer-readable storage medium of claim 8, wherein validating the command includes:

scanning an argument string associated with the command to check for disallowed characters; and

if the argument string contains disallowed characters, logging an argument error.

14. The computer-readable storage medium of claim 8, the method further comprises repeating the steps of accepting, validating, and executing until the method is terminated.

16. The apparatus of claim 15, wherein the receiving mechanism is configured to receive the account configuration file across an encrypted link on a network.

17. The apparatus of claim 15, further comprising:

a determining mechanism that is configured to determine if the command originated from an authorized internet protocol (IP) address; and

an error logging mechanism that is configured to log an IP error if the command did not originate from an authorized IP address.

18. The apparatus of claim 15, further comprising:

a password reading mechanism that is configured to re ad a password associated with the command;

a password verifying mechanism that is configured to verify the password; and

a password error logging mechanism that is configured to log a password error if the password does not verify as correct.

19. The apparatus of claim 15, further comprising:

a locating mechanism that is configured to locate the command in the master verb table; and

a command error logging mechanism that is configured to log a command error if the command is not in the master verb table.

20. The apparatus of claim 15, further comprising:

a scanning mechanism that is configured to scan an argument string associated with the command to check for disallowed characters; and

an argument logging mechanism that is configured to log an argument error if the argument string contains disallowed characters.

21. The apparatus of claim 15, further comprising a repeating mechanism that is configured to repeat the steps of accepting, validating, and executing until manually stopped.

15. An apparatus that facilitates dynamic server provisioning, wherein a number of functions are made available through use of loadable modules, comprising:

a receiving mechanism that is configured to receive an account configuration file specifying modules that an account holder is authorized to access;

a reading mechanism that is configured to read the account configuration file to determine an allowed module;

a recovering mechanism that is configured to recover a verb table from the allowed module, wherein the verb table contains a list of commands available in the allowed module;

a storing mechanism that is configured to store the verb table in a master verb table which specifies every command authorized for the account holder, wherein the master verb table relates a verb to the allowed module;

an accepting mechanism that is configured to accept a command from a user;

a validating mechanism that is configured to validate the command using the master verb table; and

an executing mechanism that is configured to execute the command by calling a corresponding function within the allowed module if the command is valid.