Method and apparatus for securing access to automotive devices and software services

• US 6,574,734 B1
• Filed: 12/28/1998
• Issued: 06/03/2003
• Est. Priority Date: 12/28/1998
• Status: Expired due to Term

• Current Assignee: Tomtom Global Content B.V (TomTom NV)
• Original Assignee: International Business Machines Corporation
• Inventors: Graham, Stephen Glen, Colson, James Campbell
• Primary Examiner(s): Hayes, Gail
• Assistant Examiner(s): JACKSON, JENISE E
• Application Number:
  US09/221,889
• Time in Patent Office: 1,618 Days
• Field of Search: 713/200, 713/166, 713/172, 713/182, 713/185, 713/202, 701/1, 701/2, 701/32, 701/36, 340/5.6, 340/5.21, 340/5.74, 340/5.8, 340/5.81, 340/5.82, 340/5.83, 340/5.84, 340/5.85, 705/59, 707/100, 707/101, 707/103, 709/1, 709/100
• US Class Current: 726/21
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 9/445 Program loading or initiating bootstrapping G06F9/4401; security arrangements for program loading or initiating G06F21/57

Abstract

A method and apparatus in a computing platform located in an vehicle for restricting access to a plurality of software components, wherein the plurality of software components are used to interface with a plurality of devices located within the vehicle. A request is received from an application for a software component, wherein the request includes a data structure, wherein the software component is a requested software component. A determination is made as to whether the requested software component is present within the plurality of software components. An access level for the application is identified and a result is returned to the application based on whether the requested software component is present in the plurality of software components and based on the access level identified for the application.

Claims

1. A method in a computing platform located in an vehicle for restricting access to a plurality of software components, wherein the plurality of software components are used to interface with a plurality of devices located within the vehicle, the method comprising:

receiving a request from an application for a type software component, wherein the request includes a data structure;

determining whether the a software component matching the software component type is present within the plurality of software components;

identifying an access level for the application; and

returning a result to the application based whether the a software component matching the software component type is present in the plurality of software components and based on the access level identified for the application.

2. The method of claim 1, wherein a number of software components match the software component type in which each software component in the number of software components is associated with an access level and wherein the step of returning a result includes:

providing the application access to a software component with the number of software components the requested software component in response the application being allowed access to the software component.

3. The method of claim 2, wherein each of the number of components has a different level of functionality and is associated with a different access level in which a higher access level is associated with a software component within the number of software components having a higher level of functionality than a software component within the number of components having a lower level of functionality.

4. The method of claim 3, wherein a component from within the number of components returned by selecting a component within the number of components having a highest level of functionality that is also allowed to be accessed by the software component.

5. A car comprising:

a body;

a set of wheels attached to the body;

an engine located within the body, wherein the engine provides power to turn at least one wheel in the set of wheels to move the body;

a plurality of devices;

a bus, wherein the bus provides electrical connection to the plurality of devices;

a computing platform, wherein the computing platform is connected to the bus, the computing platform including;

a plurality of Java software components, wherein the each of the plurality of Java software components is used to access a device within the plurality of devices; and

is associated with a authorization level;

a data structure containing a plurality of user profiles in which each profile within the plurality of user profiles is associated with an authorization level; and

a registry mechanism, wherein the registry mechanism is used to provide access to the plurality of Java software components, wherein the registry mechanism has a plurality of modes of operation including;

a first mode of operation in which the registry mechanism monitors for a request for a software component;

a second mode of operation, responsive to receiving a request in the first mode of operation, in which the registry mechanism identifies an authorization level for the request; and

a third mode of operation, for returning a result based on the identified authorization level.

6. A method in a computing platform located in an automobile for restricting access to a plurality of software components, wherein the plurality of software components are used to interface with a plurality of devices located within the automobile, the method comprising:

receiving a request from an application for a software component, wherein the request includes a data structure, wherein the software component is a requested software component;

determining whether the requested software component is present within the plurality of software components;

determining whether the application is allowed access to the requested software component based on the data structure; and

providing the application access to the requested software component in response to the software component being present and in response the application being allowed access to the requested software component.

7. The method of claim 6, wherein the step of determining whether the requested software component is present within the plurality of software components is responsive a determination that the application is allowed access.

8. The method of claim 6, wherein the step of determining whether the application is allowed access to the requested software component based on the data structure is responsive to a determination that the requested software component is present.

9. The method of claim 6, wherein the request is for a function and wherein the determining whether the software component is present includes determining whether a software component is present providing the function requested by the application.

10. A method in a computing platform located in an vehicle for restricting access to a plurality of software components, wherein the plurality of software components are used to interface with a plurality of devices located within the vehicle, the method comprising:

receiving a request from an application for a software component, wherein the request includes a data structure, wherein the software component is a requested software component;

determining whether the requested software component is present within the plurality of software components;

identifying an access level for the application; and

returning a result to the application based whether the requested software component is present in the plurality of software components and based on the access level identified for the application.

11. The method of claim 10, wherein the each software component is associated with an access level and wherein the step of returning a result includes:

providing the application access to the requested software component in response to the software component being present and in response the application being allowed access to the requested software component.

12. The method of claim 10, wherein the each software component is associated with an access level and wherein the result returned to the application indicates an absence of the software component in response to the software component being present and in response the application being denied access to the requested software component.

13. The method of claim 10 further comprising:

increasing and changing the authorization level for the software component in response to an unsuccessful request for the requested software component.

14. The method of claim 10, wherein the plurality of software components is a plurality of JavaBean components, wherein the each Java bean component within the plurality of JavaBean components represents a device within the vehicle.

15. The method of claim 10, wherein the plurality of software components is a plurality of JavaBean components, wherein the each Java bean component within the plurality of JavaBean components represents a software service within the vehicle.

16. The method of claim 10, wherein the vehicle is an automobile.

17. A data processing system located in an vehicle for restricting access to a plurality of software components, wherein the plurality of software components are used to interface with a plurality of devices located within the vehicle, the data processing system comprising:

receiving means for receiving a request from an application for a software component, wherein the request includes a data structure, wherein the software component is a requested software component;

determining means for determining whether the requested software component is present within the plurality of software components;

identifying means for identifying an access level for the application; and

returning means for returning a result to the application based whether the requested software component is present in the plurality of software components and based on the access level identified for the application.

18. The data processing system of claim 17, wherein the each software component is associated with an access level and wherein returning a result includes:

providing means for providing the application access to the requested software component in response to the software component being present and in response the application being allowed access to the requested software component.

19. The data processing system of claim 17, wherein the each software component is associated with an access level and wherein the result returned to the application indicates an absence of the software component in response to the software component being present and in response the application being denied access to the requested software component.

20. The data processing system of claim 17 further comprising:

increasing means for increasing and changing the authorization level for the software component in response to an unsuccessful request for the requested software component.

21. The data processing system of claim 17, wherein the plurality of software components is a plurality of JavaBean components, wherein the each JavaBean component within the plurality of JavaBean components represents a device within the vehicle.

22. The data processing system of claim 17, wherein the plurality of software components is a plurality of JavaBean components, wherein the each JavaBean component within the plurality of JavaBean components represents a software service within the vehicle.

23. The data processing system of claim 17, wherein the vehicle is an automobile.

24. A data processing system located in an automobile for restricting access to a plurality of software components, wherein the plurality of software components are used to interface with a plurality of devices located within the automobile, the data processing system comprising:

receiving means for receiving a request from an application for a software component, wherein the request includes a data structure, wherein the software component is a requested software component;

first determining means for determining whether the requested software component is present within the plurality of software components;

second determining means for determining whether the application is allowed access to the requested software component based on the data structure; and

providing means for providing the application access to the requested software component in response to the software component being present and in response the application being allowed access to the requested software component.

25. The data processing system of claim 24, wherein the first determining means is responsive to a determination that the application is allowed access.

26. The data processing system of claim 24, wherein the second determining means is responsive to a determination that the requested software component is present.

27. The data processing system of claim 24, wherein the request is for a function and wherein the first determining means includes means for determining whether a software component is present providing the function requested by the application.

28. A computer program product in a computer readable medium for use in an vehicle for restricting access to a plurality of software components, wherein the plurality of software components are used to interface with a plurality of devices located within the vehicle, the computer program product comprising:

first instructions for receiving a request from an application for a software component, wherein the request includes a data structure, wherein the software component is a requested software component;

second instructions for determining whether the requested software component is present within the plurality of software components;

third instructions for identifying an access level for the application; and

fourth instructions for returning a result to the application based whether the requested software component is present in the plurality of software components and based on the access level identified for the application.

29. A computer program product in a computer readable medium for use in an automobile for restricting access to a plurality of software components, wherein the plurality of software components are used to interface with a plurality of devices located within the automobile, the computer program product comprising:

first instructions for receiving a request from an application for a software component, wherein the request includes a data structure, wherein the software component is a requested software component;

second instructions for determining whether the requested software component is present within the plurality of software components;

third instructions for determining whether the application is allowed access to the requested software component based on the data structure; and

fourth instructions for providing the application access to the requested software component in response to the software component being present and in response the application being allowed access to the requested software component.