Network environment supporting mobile agents with permissioned access to resources

• US 6,681,243 B1
• Filed: 07/27/1999
• Issued: 01/20/2004
• Est. Priority Date: 07/27/1999
• Status: Expired due to Term

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Putzolu, David M., Yadav, Satyendra, Bakshi, Sanjay
• Primary Examiner(s): Najjar, Saleh
• Application Number:
  US09/361,921
• Time in Patent Office: 1,638 Days
• Field of Search: 709/202, 709/206, 709/217, 709/300, 709/317, 707/4, 707/10, 707/100, 707/101, 707/102, 707/103
• US Class Current: 709/202
• CPC Class Codes: G06F 9/4856 resumption being on a different machine, e.g. task migration, virtual machine migration G06F9/5088 takes precedence
• CPC Class Codes: G06F 9/4862 the task being a mobile agent, i.e. specifically designed to migrate
• CPC Class Codes: H04L 41/048 mobile agents
• CPC Class Codes: H04L 41/28 Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A method and system are disclosed for providing an environment allowing agents to function on a set of devices having resources, the environment providing services allowing agents access to resources. Each agent has an associated permission list indicating which services the agent may access. Each agent may move from an environment on one device on a network to an environment on another device.

Claims

1. A computer system for allowing agents to function on a set of devices, each device having a set of resources, the system comprising:

a set of agents;

for each device, an environment allowing agents to operate; and

for each device, a set of services, each service allowing access by an agent to a resource, each agent having an associated permission list indicating which service the agent may access where each service provides a standardized interface to each agent;

where each agent may move from an environment on one device to an environment on another device.

2. The system of claim 1 where each service provides access to or emulates a subset of the resource associated with the service.

3. The system of claim 1 where each service provides access to or emulates a subset of the resource associated with the service depending on an entry in the agent'"'"'s permission list.

4. The system of claim 1 where, when an agent moves from an environment on one device to an environment on another device, the state of the agent moves with the agent.

5. The system of claim 4 where, when an agent requires access to a service, an object is created associated with the service and the object is passed to the agent.

6. The system of claim 1 where:

each resource is of a certain resource type;

each service corresponds to a certain service type;

each service type corresponds to a resource type; and

each service within a service type provides an identical interface to agents.

7. The system of claim 1 where each agent includes at least:

a code segment; and

a state;

where the state is maintained as the agent moves from a first device to a second device.

8. The system of claim 7 where a subset of the set of agents may perform network management functions.

9. The system of claim 7 where a subset of the set of agents may act as a user application.

10. The system of claim 7 where each agent in a subset of the set of agents may access a resource on a device other than which the agent is currently executing.

11. A method for allowing a mobile software agent to access a resource on a device in a set of devices, each device in the set of devices having a set of resources, the method comprising:

the agent calling a service on the device;

determining if the agent has permission to access the resource; and

if the agent has permission to access to the resource, the agent invoking the service associated with the resource, and the service accessing the resource where each service provides a standardized interface to each agent.

12. The method of claim 11 where each agent may move from a first device in the set of devices to a second device in the set of devices.

13. The method of claim 12, further comprising:

creating an object associated with a service;

passing the object to the agent; and

the agent calling the service by accessing the object.

14. The method of claim 12 where, when an agent moves, a code segment, data segment, and permission list associated with the agent is moved.

15. The method of claim 11 where each agent has an associated permission list indicating which service the agent may access.

16. The method of claim 11 where:

each service provides access to a subset of the resource associated with the service; and

each service may provide access to the resource by emulating the resource.

17. The method of claim 16 where each service provides access to a subset of the resource associated with the service depending on an entry in a permission list associated with the agent.

18. The method of claim 11 where each agent in a subset of the set of agents may access a resource on a device other than which the agent is currently executing.

19. The method of claim 11 where the agent may perform network management functions.

20. The method of claim 11 where the agent may act as a user application.

21. A set of instructions residing in a storage medium, said set of instructions capable of being executed by a processor to implement a method for extracting information from a file, the method comprising:

allowing the agent to call a service on the device;

determining if the agent has permission to access the resource; and

if the agent has permission to access to the resource, allowing the agent to invoke the service associated with the resource, and allowing the service to access the resource where each service provides a standardized interface to each agent.

22. The method of claim 21 where the plurality of instructions further comprises:

defining, for each agent, an associated permission list indicating which service the agent may access.