Permission token managemnet system, permission token management method, program and recording medium

• US 20040122877A1
• Filed: 11/12/2003
• Published: 06/24/2004
• Est. Priority Date: 11/20/2002
• Status: Abandoned Application

• Current Assignee: NEC Corporation
• Original Assignee: NEC Corporation
• Inventors: Nakayama, Yoshitaka
• Application Number:
  US10/706,568
• Publication Number:
  US 20040122877A1
• Time in Patent Office: Days
• US Class Current: 708/200
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32

Abstract

A token table stores tokens corresponding respectively to permissions installed in a terminal. Prior to downloading an application program (AP), when a permission character string necessary for normally operating an AP intended to be downloaded is input from an installer, a hash value calculating means obtains a hash value of the permission character string, and a searching means searches the token table using the hash value. If a token matching the hash value exists, an instruction to authorize the download is output, and if it does not exist, an instruction not to authorize the download is output.

Claims

1. A permission token management system comprising:

a token table for storing tokens which correspond respectively to a plurality of permissions installed in a terminal and are calculated by a predetermined conversion process performed to permission character strings indicating the permissions;

conversion means for, when a permission character string indicating a specific permission is input, performing the predetermined conversion process to the permission character string; and

searching means for searching the token table using a token which is a conversion result of the conversion means, and determining whether the token exists in the token table or not.

8. The permission token management system as claimed in claims 1 and 5, wherein the conversion means has a function of obtaining a hash value corresponding to a permission character string.

9. The permission token management system as claimed in claims 1 and 5, wherein the token has less number of characters than that of the permission character string.

2. A permission token management method comprising the steps of:

storing tokens which correspond respectively to a plurality of permissions installed in a terminal and are calculated by a predetermined conversion process performed to permission character strings indicating the permissions;

when a permission character string indicating a specific permission is input, performing the predetermined conversion process to the permission character string; and

searching a token table using a token which is a conversion result of the conversion process, and determining whether the token exists in the token table or not.

3. A recording medium into which a program for causing a computer to execute each step as claimed in claim 2 is recorded.

4. A program as an electric signal for causing a computer to execute each step as claimed in claim 2.

5. A permission token management system comprising:

a token table for storing tokens which correspond respectively to a plurality of permissions installed in a terminal and are calculated by a predetermined conversion process performed to permission character strings indicating the permissions;

search request/saving means for, when a permission character string indicating a permission necessary for normally operating an application program intended to be downloaded is input, outputting a search request including the permission character string;

conversion means for performing the predetermined conversion process to the permission character string included in the search request output from the search request/saving means, and outputting a token which is a conversion result; and

first searching means for searching the token table using the token output from the conversion means to thereby determine whether a permission necessary for normally operating the application program is installed in the terminal or not.

6. The permission token management system as claimed in claim 5, further comprising:

a token attribute information table within which, relating to each of the plurality of permissions installed in the terminal, a token of the permission and attribute information including conditions of use are registered in correspondence with each other;

a permission database;

token obtaining means for, when a permission character string indicating a permission desired for use is output from the application program at the time of executing the application program, outputting a token obtaining request including the permission character string to the conversion means, and receiving a token output from the conversion means responding to the token obtaining request; and

second searching means for determining whether to authorize the application program to use the permission or not, in accordance with the attribute information of the permission which corresponds to the token and is obtained by searching the permission database using the token received by the token obtaining means;

wherein

the conversion means has a function of, responding to the token obtaining request from the token obtaining means, performing the predetermined conversion process to the permission character string being requested for obtaining the token, and outputting a conversion result to the token obtaining means, and

the search request/saving means has a function of, when the permission necessary for normally operating the application program is determined by the first searching means to be installed in the terminal, obtaining the attribute information of the permission from the token attribute information table, and registering in the permission database the attribute information and the token of the permission in correspondence with each other.

7. The permission token management system as claimed in claim 6, wherein the conditions of use of the permission include an identifier of the application program.

10. A permission token management method comprising the steps of:

storing tokens which correspond respectively to a plurality of permissions installed in a terminal and are calculated by performing a predetermined conversion process to permission character strings indicating the permissions;

when a permission character string indicating a permission necessary for normally operating an application program intended to be downloaded is input, outputting a search request including the permission character string;

performing the predetermined conversion process to the permission character string included in the search request, and outputting a token which is a conversion result; and

by using the token, determining whether a permission necessary for normally operating the application program is installed in the terminal or not.

11. A recording medium into which a program for causing a computer to execute each step as claimed in claim 10 is recorded.

12. A program as an electric signal for causing a computer to execute each step as claimed in claim 10.