Access control in a distributed computer system

• US 5,339,403 A
• Filed: 04/05/1993
• Issued: 08/16/1994
• Est. Priority Date: 05/11/1990
• Status: Expired due to Term

• Current Assignee: International Computers Limited (Fujitsu Limited)
• Original Assignee: International Computers Limited (Fujitsu Limited)
• Inventors: Parker, Thomas A.
• Primary Examiner(s): MacDonald, Allen R.
• Assistant Examiner(s): Sheikh, Ayaz R.
• Application Number:
  US08/042,441
• Time in Patent Office: 498 Days
• Field of Search: 395/725, 395/425, 395/325, 395/275, 395/600, 380/21, 380/18, 380/10, 380/25, 380/23
• US Class Current: 711/221
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 9/468 Specific access rights for resources, e.g. using capability register

Abstract

A distributed computer system, has a number of users and target applications. When a user logs on to the system, an authentication unit issues the user with a privilege attribute certificate (PAC) representing the user'"'"'s access rights. When the user wishes to access a target application, he presents the PAC to that application as evidence of his access rights. The application, in turn, passes the PAC to a PAC use monitor (PUM) which validates the PAC. The PUM is shared between a plurality of applications.

Claims

1. In a distributed computer system, a method of controlling access from a user program to a plurality of target programs, the method comprising the steps:

(a) issuing said user program with an encrypted privilege attribute certificate (PAC), said PAC indicating which of said target programs the user program is permitted to access,

(b) transmitting the encrypted PAC from the user program to one of the target programs,

(c) transmitting the encrypted PAC from said one of the target programs to a validation unit,

(d) in the validation unit, decrypting the encrypted PAC and checking whether the PAC permits the user program to access said one of the target programs,

(e) returning a message from the validation unit to said one of the target programs, indicating whether the user program is permitted to access said one of the target programs, and

(f) returning a success/failure indication from said one of the target programs to said user program indicating whether the user program is permitted to access said one of the target programs.

2. The method according to claim 1 wherein each PAC contains a cryptographic key, and wherein the validation unit, when it determines that the user program is permitted to access said one of the target programs, supplies said cryptographic key to said one of the target programs for use in communicating with the user program.

3. The method according to claim 1 wherein each PAC has a PAC qualifier associated with it, and wherein the validation unit permits a PAC with a particular PAC qualifier to be used to gain access to a target program up to a maximum number of times as specified by a count value in the PAC qualifier.