Process based security tai building

• US 20040093525A1
• Filed: 09/22/2003
• Published: 05/13/2004
• Est. Priority Date: 02/01/2002
• Status: Abandoned Application

• Current Assignee: Systems Advisory Group Enterprises Incorporated
• Original Assignee: Systems Advisory Group Enterprises Incorporated
• Inventors: Larnen, Vincent Alan
• Application Number:
  US10/667,925
• Publication Number:
  US 20040093525A1
• Time in Patent Office: Days
• US Class Current: 726/16
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 9/468 Specific access rights for resources, e.g. using capability register

Abstract

A method to build a resource access table in a system for controlling access to resources is disclosed. The protocol identifies a resource call in a process. Each of the resources accessed by resource calls are identified. Permission is assigned to the resource, with regard to the process. A resource access table is written, with each entry identifying the process, the resource and the permission. When the process is executed and the process makes a resource call to the resource, access to the resource is controlled by the permission data entry in the resource access table entry of the resource access table.

Claims

1. A method of building a resource access table in a system for controlling access to resources comprising the steps of:

identifying a resource call in a process;

identifying a resource accessed by the resource call;

assigning permission to the resource;

writing a resource access table entry in a resource access table including data identifying the process, the resource and the permission;

such that when the process is executed and the process makes a resource call for the resource, access to the resource may be controlled by the permission data entry in the resource access table entry of the resource access table.

2. The method of building a resource access table of claim 1, wherein the step of identifying a resource call in a process is automated.

3. The method of building a resource access table of claim 1, wherein the step of identifying a resource accessed by the resource call is performed by a computer.

4. The method of building a resource access table of claim 1, wherein the step of assigning permission data to the resource is performed by software.

5. The method of building a resource access table of claim 1, further including the step of writing a resource access table entry to a process resource access table.

6. The method of building a resource access table of claim 5, wherein said process resource access table is compiled to generate a resource access table.

7. A method of building a resource access table in a system for controlling access to resources comprising the steps of:

identifying a resource call in a process;

identifying a resource accessed by the resource call;

assigning permission to the resource call;

writing a resource access table entry in a resource access table including data identifying the process, the resource call, the resource and the permission;

such that when the process is executed and the process makes a resource call to the resource, access to the resource may be controlled by the permission data in the resource access table entry of the resource access table.

8. The method of building a resource access table of claim 7, wherein the step of identifying a resource call in a process is automated.

9. The method of building a resource access table of claim 7, wherein the step of identifying a resource accessed by the resource call is performed by a computer.

10. The method of building a resource access table of claim 7, wherein the step of assigning permission data to the resource is performed by software.

11. The method of building a resource access table of claim 7, further including the step of writing a resource access table entry to a process resource access table.

12. The method of building a resource access table of claim 11, wherein said process resource access table is compiled to generate a resource access table.