Java security mechanism

• US 5,987,608 A
• Filed: 05/13/1997
• Issued: 11/16/1999
• Est. Priority Date: 05/13/1997
• Status: Expired due to Term

• Current Assignee: Meta Platforms, Inc. (f/k/a Facebook, Inc.)
• Original Assignee: Netscape Communications Corporation (Apollo Global Management, Inc.)
• Inventors: Roskind, James A.
• Primary Examiner(s): Palys, Joseph E.
• Assistant Examiner(s): NGUYEN, NGUYEN X
• Application Number:
  US08/856,479
• Time in Patent Office: 917 Days
• Field of Search: 370/245, 380/23, 380/49, 380/3, 380/4, 395/186, 395/188.01, 395/200.32, 395/200.53, 395/200.54, 395/609, 395/650, 713/200
• US Class Current: 726/14
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 9/468 Specific access rights for resources, e.g. using capability register

Abstract

A computer program product is for use with a computer system that executes methods. Scope permission setting computer readable program code includes access request reception computer readable program code for receiving a request from a first method, executing at a first security level, to be dynamically empowered to access methods to be executed at a second security level, wherein the second security level is higher than the first security level. Dynamic capability activation computer readable program code is responsive to the access request reception code and includes static capability determination computer readable program code for determining if the first method is statically capable of accessing security methods generally and dynamic capability indication computer readable program code, responsive to the static capability determination code, for indicating in the activation record for the first method that the first method has been dynamically empowered to access security methods generally. Dynamic capability determination computer readable code, responsive to a request by the first method to access a particular security method, is for determining whether the activation record created for the first method includes an indication that the first method is capable of accessing security methods generally.

Claims

1. A computer program product for use with a computer system that executes methods, the computer program product comprising:

scope permission setting computer readable program code means, including;

access request receiving computer readable program code means for receiving a request from a first method, executing at a first security level, to be dynamically empowered to generally access second methods, to be executed at a second security level, wherein the second security level is higher than the first security level such that the second methods have access to resources of the computer system that are inaccessible to the first method; and

dynamic capability activating computer readable program code means, responsive to the access request receiving code means and including;

static capability determining computer readable program code means for determining if the first method is statically capable of generally accessing methods having the second security level;

dynamic capability indicating computer readable program code means, responsive to a positive determination by the static capability determining code means of the dynamic capability activating code means, for indicating in the activation record for the first method that the first method has been dynamically empowered to generally access methods having the second security level;

dynamic capability determining computer readable code means, responsive to a request by the first method to access a particular one of the second methods, for determining whether the activation record created for the first method includes a dynamic indication that the first method is capable of generally accessing methods having the second security level.

2. The computer program product of claim 1, wherein the dynamic capability determining computer readable program code means is further for determining if the first method is statically capable of generally accessing methods having the second security level.

3. The computer program product of claim 2, and further including access disallowance indicating means, responsive to the dynamic capability determining code means determining that the first method is not statically capable of generally accessing security methods, for indicating a disallowance of the first method to access the particular second method.

4. The computer program product of claim 3, and further including allowance indicating means, responsive to the dynamic capability determining code means determining that the first method is statically capable of generally accessing methods having the second security level and also that the activation record created for the first method includes a dynamic indication that the first method is capable of generally accessing methods having the second security level, for indicating an allowance of the first method to access the particular second method.

5. The computer program product recited in claim 1, further including:

repeating computer readable program code means for causing the dynamic capability determining program code means to operate upon a second method in place of the first method, wherein the second method is a method that caused the first method to be activated.

6. The computer program product recited in claim 4, and further comprising:

traversing computer readable program code means for traversing an activating thread of the first method;

wherein the dynamic capability indicating code means operates upon each particular method in the activating thread of the first method as if the particular method is the first method; and

wherein the allowance indicating means and the disallowance indicating means operate responsive to the dynamic capability indicating code means operates upon each particular method in the activating thread of the first method.

7. The computer program product of claim 1, and further comprising:

allowance indicating means, responsive to the dynamic capability determining code means determining that the first method is statically capable of accessing methods having the second security level, for indicating allowance of the first method to access methods having the second security level.

8. The computer program product of claim 1, and further comprising:

method activating computer readable program code means including activation record creating computer readable program code means for creating the activation record for the first method upon invocation of the first method and method executing computer readable program code means for causing the computer to execute the first method.

9. The computer program product recited in claim 8, and further comprising:

method deactivating computer readable program code means including activation record destroying computer readable program code means for destroying the activation record for the first method upon de-invocation of the first method.

10. A process executed by a computer system that executes methods, the process comprising:

a scope permission setting step, including;

receiving an access request from a first method, executing at a first security level, to be dynamically empowered to generally access second methods, to be executed at a second security level, wherein the second security level is higher than the first security level such that the second methods have access to resources of the computer system that are inaccessible to the first method; and

activating a dynamic capability for the first method, responsive to the access request receiving step and including;

determining if the first method is statically capable of generally accessing methods having the second security level;

responsive to a positive determination in the static capability determining step of the dynamic capability activating step, indicating in the activation record for the first method that the first method has been dynamically empowered to generally access methods having the second security level;

responsive to a request by the first method to access a particular one of the second methods, determining whether the activation record created for the first method includes a dynamic indication that the first method is capable of generally accessing methods having the second security level.

11. The process of claim 10, wherein the dynamic capability determining step further determining if the first method is statically capable of generally accessing methods having the second security level.

12. The process of claim 11, and further including a step, responsive to the dynamic capability determining code means determining that the first method is not statically capable of generally accessing security methods, of indicating a disallowance of the first method to access the particular second method.

13. The process of claim 12, and further including, responsive to the dynamic capability determining step determining that the first method is statically capable of generally accessing methods having the second security level and also that the activation record created for the first method includes a dynamic indication that the first method is capable of generally accessing methods having the second security level, a step of indicating an allowance of the first method to access the particular second method.

14. The process of claim 10, further including:

a repeating step that causes the dynamic capability determining program code step to operate upon a second method in place of the first method, wherein the second method is a method that caused the first method to be activated.

15. The process recited in claim 13, and further comprising:

a traversing step that traverses an activating thread of the first method;

wherein the dynamic capability indicating step operating upon each particular method in the activating thread of the first method as if the particular method is the first method; and

wherein the allowance indicating step and the disallowance indicating step operating responsive to the dynamic capability indicating code means operating upon each particular method in the activating thread of the first method.

16. The process recited in claim 10, and further comprising:

responsive to the dynamic capability determining step determining that the first method is statically capable of accessing methods having the second security level, indicating allowance of the first method to access methods having the second security level.

17. The process of claim 10, and further comprising:

creating the activation record for the first method upon invocation of the first method and causing the computer to execute the first method.

18. The computer program product recited in claim 17, and further comprising:

destroying the activation record for the first method upon de-invocation of the first method.