System and method for application and user-based class of security

• US 20050015592A1
• Filed: 07/14/2004
• Published: 01/20/2005
• Est. Priority Date: 07/15/2003
• Status: Abandoned Application

• Current Assignee: Jeou-Kai Lin
• Original Assignee: Jeou-Kai Lin
• Inventors: Lin, Jeou-Kai
• Application Number:
  US10/891,164
• Publication Number:
  US 20050015592A1
• Time in Patent Office: Days
• US Class Current: 713/166
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control

Abstract

A method for automatically adjusting the security level for a given application and specific user includes the steps of determining a security level assigned to the application, determining whether the security level is dependent upon a type of specific user, executing the application without security if no security level is assigned to the application and if the security level is not dependent upon the type of specific user, executing the application with security if the application has an assigned security level and if the security level is not dependent upon the type of specific user, assigning the security level if the security is dependent upon the type of specific user, and executing the application with the assigned security level dependent upon the type of specific user.

Claims

1. A method for automatically adjusting the security level for a given application and specific user comprising the steps of:

determining a security level assigned to the application;

determining whether the security level is dependent upon a type of specific user;

executing the application without security if no security level is assigned to the application and if the security level is not dependent upon the type of specific user;

executing the application with security if the application has an assigned security level and if the security level is not dependent upon the type of specific user;

assigning the security level if the security is dependent upon the type of specific user; and

executing the application with the assigned security level dependent upon the type of specific user.

2. The method as claimed in claim 1, wherein the security levels comprise authentication, authentication plus encryption, authentication plus access control, and authentication plus encryption plus access control.

3. The method as claimed in claim 2, wherein assigning the security level if the security is dependent upon the type of specific user further comprises determining if the specific user is using a wireless device in a case were the type of the specific user cannot be determined, determining if access control is required, assigning authentication plus encryption plus access control if the specific user is using the wireless device and access control is required, assigning authentication plus encryption if the specific user is using the wireless device and access control is not required, assigning authentication plus access control if the specific user is not using the wireless device and access control is required, and assigning authentication if the specific user is not using the wireless device and access control is not required.

4. A system for automatically adjusting the security level for a given application and specific user comprising:

a memory comprising program instructions; and

a processor coupled to the memory, the processor operable to execute the program instructions to perform the operations of determining a security level assigned to the application, determining whether the security level is dependent upon a type of specific user, executing the application without security if no security level is assigned to the application and if the security level is not dependent upon the type of specific user, executing the application with security if the application has an assigned security level and if the security level is not dependent upon the type of specific user, assigning the security level if the security is dependent upon the type of specific user, and executing the application with the assigned security level dependent upon the type of specific user.

5. The system as claimed in claim 4, wherein the security levels comprise authentication, authentication plus encryption, authentication plus access control, and authentication plus encryption plus access control.

6. The system as claimed in claim 5, wherein assigning the security level if the security is dependent upon the type of specific user further comprises determining if the specific user is using a wireless device in a case were the type of the specific user cannot be determined, determining if access control is required, assigning authentication plus encryption plus access control if the specific user is using the wireless device and access control is required, assigning authentication plus encryption if the specific user is using the wireless device and access control is not required, assigning authentication plus access control if the specific user is not using the wireless device and access control is required, and assigning authentication if the specific user is not using the wireless device and access control is not required.

7. A computer-readable medium containing one or more instructions for automatically adjusting the security level for a given application and specific user comprising:

a code segment for determining a security level assigned to the application;

a code segment for determining whether the security level is dependent upon a type of specific user;

a code segment for executing the application without security if no security level is assigned to the application and if the security level is not dependent upon the type of specific user;

a code segment for executing the application with security if the application has an assigned security level and if the security level is not dependent upon the type of specific user;

a code segment for assigning the security level if the security is dependent upon the type of specific user; and

a code segment for executing the application with the assigned security level dependent upon the type of specific user.

8. The computer-readable medium as claimed in claim 7, wherein the security levels comprise authentication, authentication plus encryption, authentication plus access control, and authentication plus encryption plus access control.

9. The computer-readable medium as claimed in claim 8, wherein assigning the security level if the security is dependent upon the type of specific user further comprises determining if the specific user is using a wireless device in a case were the type of the specific user cannot be determined, determining if access control is required, assigning authentication plus encryption plus access control if the specific user is using the wireless device and access control is required, assigning authentication plus encryption if the specific user is using the wireless device and access control is not required, assigning authentication plus access control if the specific user is not using the wireless device and access control is required, and assigning authentication if the specific user is not using the wireless device and access control is not required.