Network adapter management

• US 20030145235A1
• Filed: 09/26/2002
• Published: 07/31/2003
• Est. Priority Date: 01/31/2001
• Status: Abandoned Application

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Choo, Tse Huong
• Application Number:
  US10/240,138
• Publication Number:
  US 20030145235A1
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: G06F 21/50 Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 9/468 Specific access rights for resources, e.g. using capability register

Abstract

An operating system comprising a kernel (100) incorporating mandatory access controls as a means to counter the effects posed by application compromise. The operating system uses a technique known as “containment” to at least limit the scope of damage when security breaches occur. In a preferred embodiment, each application supported by the operating system, is assigned a tag or label, each tag or label being indicative of a logically protected computing environment or “compartment”, and applications having the same tag or label belonging to the same compartment. By default, only applications running in the same compartment can communicate with each other. Access control rules define very narrow tightly-controlled communications paths between compartments.

Claims

1. ) An operating system comprising which dynamically assigns a label to a newly-installed adapter substantially upon activation thereof, the label depending upon the attributes of said adapter, and removes said label when said adapter is deactivated.

2. ) An operating system as claimed in claim 1, comprising a kernel which dynamically assigns and removes said label.

3. ) An operating system as claimed in claim 1, comprising software-routines which are invoked when a new adapter is activated.

4. ) An operating system as claimed in claim 3, in which the software-routines are modified to assign a label depending on the attributes of the newly-newly-installed adapter.

5. ) An operating system as claimed in claim 3, in which the labels are assigned by consulting a ruleset.

6. ) An operating system as claimed in claim 3, in which the labels are assigned by consulting a configuration table.

7. ) An operating system as claimed in claim 1, comprising software-routines which are invoked when an adapter is de-activated, to remove the label previously assigned.