Vault controller supervisor and method of operation for managing multiple independent vault processes and browser sessions for users in an electronic business system

• US 6,931,526 B1
• Filed: 12/31/1998
• Issued: 08/16/2005
• Est. Priority Date: 06/04/1998
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Burns, Robert, Carroll, Robert B., Fisk, Mark, Bacha, Hamid
• Primary Examiner(s): Barrón, Gilberto
• Assistant Examiner(s): ZAND, KAMBIZ
• Application Number:
  US09/223,765
• Time in Patent Office: 2,420 Days
• Field of Search: 713/151, 713/152, 713/156, 713/193, 713/155, 705/76, 705 78- 79
• US Class Current: 713/151
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/38215 Use of certificates or encrypted proofs of transaction rights
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32

Abstract

A vault controller manages resources in a secure environment or vault dedicated to an authorized user(s) for conducting electronic business in a distributed information system. The controller includes a web server and a supervisor in a shared object library, which runs as part of an HTTP daemon. The supervisor runs as a multi-threaded process with state and data tables and a vault daemon to support launching secure processes mapped to users through digital certificates. The vault daemon generates a password for a user request based on the user ID. The vault daemon launches a vault process (VP) running in a vault mapped to the user ID. After launching, the VP returns a message to the supervisor including a token identifying the thread. The supervisor sends the user request through a socket to the secure VP mapped to the user ID. The VP receives the request and launches a VP thread to handle the request. The VP thread writes the process data back through the socket to the supervisor thread for return to the user.

Claims

1. In an electronic business system, a vault controller supervisor managing the interaction in a secure manner using PKI between end users and applications running in the system, comprising:

a web server; and

a shared object library coupled to the server and including a supervisor performing vsSupervisor Initialize and vsSupervisor Service functions for handling user independent, multi-threaded, persistent and stateful vault processes running in a secure environment linked to the user, wherein state data tables in the supervisor provide a stateful environment for user requests in an otherwise stateless electronic business system.

2. The vault controller supervisor of claim 1 further comprising:

a multithreaded service supervisor launched by the vsSupervisor Service function for processing user request on a thread basis and mapping each request to a secure environment linked to the user.

3. The vault controller supervisor of claim 1 further comprising:

a communication supervisor launched by the vsSupervisor Initialize function and running as a thread for conducting communications between user dedicated vault processes and the user.

4. The vault controller supervisor of claim 1 further comprising:

a request supervisor launched by the vsSupervisor Initialize function running as thread for processing user requests without a vault access certificate.

6. The vault controller supervisor of claim 1 further comprising:

means for mapping a vault access certificate into a user Id.

7. The vault controllers supervisor of claim 1 further comprising:

means for generating a vault password for a user Id.

5. In an electronic business system, a vault controller supervisor managing the interaction in a secure manner using PKI between end users and applications running in the system, comprising:

a web server;

a shared object library coupled to the server and including a supervisor performing vsSupervisor Initialize and vsSupervisor Service functions for handling user independent, multi-threaded, persistent and stateful vault processes running in a secure environment linked to the user; and

a vault daemon for launching a vault process thread linked to a user ID in response to a service supervisor thread.

8. In a vault controller supervisor including a web server and a shared object library providing support for multiple service supervisor threads;

a communication thread;

a request supervisor thread;

stateful state data tables; and

a vault daemon to support launching a vault process in a personal vault linked to a user, a method for managing browser requests to user independent, multi-threaded persistent and stateful vault processes linked to the user in the personal vault, comprising the steps of;

a) initializing the communication supervisor thread, the request supervisor thread, and the state data tables;

b) in response to a user request, starting a service supervisor thread which determines whether the user has presented a digital certificate for executing a vault process mapped to the user;

c) mapping the certificate to a user Id, if presented;

otherwise, mapping the request to a validator vault;

d) determining if the user ID exists in the state data table;

e) creating a row in the state tables if the ID does not exist and blocking the request until a vault process has been launched;

otherwise transmitting the request to the vault process linked to the user for execution;

f) sending a message to the vault daemon to generate a password for the user based on the userID after a row is established in the state tables;

g) using the Id and password to launch a process running in a vault mapped to the user ID;

h) sending a message to the communication supervisor including a token identifying the service supervisor process thread responding to the user request;

i) verifying the token and populating table entry with the token;

j) unblocking the service supervisor thread which then sends the user request to the vault process mapped to the user ID which launches a vault process thread linked to the service supervisor thread to process the request; and

k) after processing the request, sending data to the communication supervisor for return to the browser and user.

9. The method of claim 8 further comprising the steps of:

processing a user request without a vault access certificate.

10. The method of claim 8 further comprising the steps in the vault daemon and vsSU of:

adding the user ID to the password file;

creating a home directory;

changing ownership for a directory and its contents to a new vault ID;

launching the vault process under the new user ID; and

forwarding the new password to use to protect the vault private keys through a pipe.

11. The method of claim 8 wherein the state data tables comprise a vault process table and a session table.

12. In a vault controller supervisor including a web server and a shared object library providing support for multiple service supervisor threads;

a communication thread;

a request supervisor thread;

stateful state data tables; and

a vault daemon to support launching a vault process, a personal vault linked to a user for storing and processing encrypted/decrypted information, comprising;

a) means for executing a vault process for processing information in response to the vault daemon and based on the state data tables;

b) certified encryption/decryption keys for cryptographically processing the information for the vault process;

c) a disk process means for storing information processed in the vault; and

d) means for accessing a database.

13. The personal vault of claim 12 further comprising:

means for executing programs and application in a secure environment on behalf of users having a vault access certificate.

14. The personal vault of claim 12 further comprising:

means for running in the vault process on behalf of a user linked to the vault.

15. The personal vault of claim 12 further comprising:

a validator vault for processing user request without a vault access certificate and generating a new vault access for such user.

16. The personal vault of claim 12 wherein the personal vault digital keys are used for signing and encryption/decryption.

17. The personal vault of claim 12 further comprising:

an X.500 Directory entry which stores the vault'"'"'s public key certificate provided by a Certificate Authority.

18. The personal vault of claim 12 further comprising:

a group writable queue and “

public”

directory for receiving encrypted messages.

19. In a vault controller, a method for managing multi-threaded persistent and stateful vault processes in a personal vault, comprising:

a) responsive to a user request, starting a first thread which determines whether the user has presented a digital certificate for executing a vault process in the personal vault mapped to the user;

b) determining in a state data table if an ID exists for the user;

c) creating a row in the state table if the ID does not exist and blocking the request until a vault process has been launched;

d) sending a message to a vault daemon to generate a password for the user based on the user ID after a row is established in the state tables; and

e) using the ID and password to launch a process running in the personal vault mapped to the user ID.

20. The method of claim 19 further comprising:

sending a message to a communication supervisor including a token identifying the first process thread responding to the user request; and

verifying the token and populating the state table with the token.

21. The method of claim 20 further comprising:

unblocking the first thread which sends the user request to the vault process mapped to the user ID;

launching a vault process thread linked to the first thread to process the request; and

after processing the request, sending data to the communication supervisor for return to the user.

22. The method of claim 21 further comprising the steps of:

processing a user request without a vault access certificate.

23. The method of claim 22 further comprising:

adding the user ID to the password file;

creating a home directory;

changing ownership for a directory and its contents to a new vault ID;

launching the vault process under the new user ID; and

forwarding the new password through a pipe to protect private keys of the vault.

24. The method of claim 23 wherein the state data tables comprise a vault process table and a session table.