Multi-connection control system

• US 6,922,729 B1
• Filed: 07/30/1999
• Issued: 07/26/2005
• Est. Priority Date: 07/30/1999
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Cheung, Tom Thuan
• Primary Examiner(s): Harvey, Jack B.
• Assistant Examiner(s): Nguyen, Hai V.
• Application Number:
  US09/364,315
• Time in Patent Office: 2,188 Days
• Field of Search: 709/229, 709/225, 709/105, 709/104, 709/226, 709/227, 709/328, 709/237, 709/217, 713/201, 340/5.8, 340/5.86, 707/8, 707/200, 711/5, 711/111, 711/163, 711/167, 712/220, 710/107, 710/200, 718/104, 718/105, 714/43, 705/77, 359/118
• US Class Current: 709/229
• CPC Class Codes: G06F 16/20 of structured data, e.g. relational data
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2147 Locking files

Abstract

The present invention discloses a multi-connection control system. Initially, one or more requests to access a system are received. For each request, it is determined whether to allow access to the system using an access vector to identify an available access object.

Claims

1. A method of determining access to a system supporting a plurality of simultaneous accesses, the method comprising the steps of:

receiving a request to access the system,

determining whether to allow access to the system using an access vector comprising a plurality of access objects, each access object corresponding to one of the simultaneous accesses,

allowing access to the system only when at least one of the access objects is available, and

if access to the system is allowed based on an available access object, changing the available access object to an unavailable access object for the duration of the access,

wherein the number of simultaneous accesses permitted is modifiable by changing a number of access objects in the access vector without halting operation of the system.

2. The method of claim 1, wherein each access object comprises information regarding attributes of the access object.

3. The method of claim 2, wherein the step of determining further comprises the step of evaluating whether the request can be satisfied with an available access object based on one or more attributes of that access object.

4. The method of claim 1, further comprising the step of returning a result to the request.

5. The method of claim 1, further comprising the step of modifying the access vector upon receiving an indication that a request has completed its access to the system.

6. The method of claim 1, wherein the number of access objects in the access vector is increased.

7. The method of claim 1, wherein the number of access objects in the access vector is decreased.

8. The method of claim 1, further comprising the step of modifying one or more attributes of an access object.

9. An apparatus for determining access to a system supporting a plurality of simultaneous accesses, comprising:

a computer,

one or more computer programs, executed by the computer, for;

receiving a request to access the system,

determining whether to allow access to the system using an access vector comprising a plurality of access objects, each access object corresponding to one of the simultaneous accesses,

allowing access to the system only when at least one of the access objects is available, and

if access to the system is allowed based on an available access object, changing the available access object to an unavailable access object for the duration of the access, and

means for modifying the number of simultaneous accesses permitted by changing a number of access objects in the access vector without halting operation of the system.

10. The apparatus of claim 9, wherein each access object comprises information regarding attributes of the access object.

11. The apparatus of claim 10, wherein determining whether to allow access to the system using an access vector further comprises evaluating whether the request can be satisfied with an available access object based on one or more attributes of that access object.

12. The apparatus of claim 9, further comprising means for returning a result to the request.

13. The apparatus of claim 9, further comprising means for modifying the access vector upon receiving an indication that a request has completed its access to the system.

14. The apparatus of claim 9, wherein the number of access objects in the access vector is increased.

15. The apparatus of claim 9, wherein the number of access objects in the access vector is decreased.

16. The apparatus of claim 9, further comprising means for modifying one or more attributes of an access object.

17. An article of manufacture comprising a computer program carrier readable by a computer and tangibly embodying one or more instructions executable by the computer to perform method steps for determining access to a system supporting a plurality of simultaneous accesses, the method comprising the steps of:

receiving a request to access the system;

determining whether to allow access to the system using an access vector comprising a plurality of access objects, each access object corresponding to one of the simultaneous accesses,

allowing access to the system only when at least one of the access objects is available, and

if access to the system is allowed based on an available access object, changing the available access object to an unavailable access object for the duration of the access,

wherein the number of simultaneous accesses permitted is modifiable by changing a number of access objects in the access vector without halting operation of the system.

18. The article of manufacture of claim 17, wherein each access object comprises information regarding attributes of the access object.

19. The article of manufacture of claim 18, wherein the step of determining further comprises the step of evaluating whether the request can be satisfied with an available access object based on one or more attributes of that access object.

20. The article of manufacture of claim 17, further comprising the step of returning a result to the request.

21. The article of manufacture of claim 17, further comprising the step of modifying the access vector upon receiving an indication that a request has completed its access to the system.

22. The article of manufacture of claim 17, wherein the number of access objects in the access vector is increased.

23. The article of manufacture of claim 17, wherein the number of access objects in the access vector is decreased.

24. The article of manufacture of claim 17, further comprising the step of modifying one or more attributes of an access object.