Capability-based access control for applications in particular co-operating applications in a chip card

• US 7,490,333 B2
• Filed: 12/08/2000
• Issued: 02/10/2009
• Est. Priority Date: 12/10/1999
• Status: Expired due to Fees

• Current Assignee: Gemalto SA (Thales SA)
• Original Assignee: Gemalto SA (Thales SA)
• Inventors: Vandewalle, Jean-Jacques, Hagimont, Daniel, Grimaud, Gilles
• Primary Examiner(s): Ho; Andy
• Application Number:
  US10/148,954
• Publication Number:
  US 20030065982A1
• Time in Patent Office: 2,986 Days
• Field of Search: 719/310, 719/316, 719/313, 719/331, 719/332, 713/159, 713/167, 713/172, 713/185
• US Class Current: 719/316
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect

Abstract

The invention relieves an application programmer of the responsibility for managing access rights, by providing application code that is independent of the protection in a chip card. When an application, for example in a docking station, is given access to an object pertaining to another application in a chip card, two capabilities are created respectively in the applications, as objects, to protect all subsequent accesses to the object by filtering them through the two capabilities. On accessing an object pertaining to an application, if a second object pertaining to the other application is passed on to the latter, two other capabilities are added in the applications to protect access to the second object.

Claims

1. A method for controlling access between two applications each cooperating by means of capabilities on objects belonging to the other application, the applications cooperating through at least one operating system and being established in a data processing means, comprising the following step:

when one of the applications, known as the access-requesting application, is given access to an object belonging to another application, known as the access-providing application,

creating two capabilities respectively in said access-requesting and providing applications, as objects;

wherein the capability created in the access-providing application limits access to said object and,

the capability created in the access-requesting application associates the access-requesting application with the capability created in the access-providing application.

2. A method according to claim 1, wherein, during access to an object belonging to one of the applications, if a second object belonging to one of the applications is passed to one of the applications, performing the further step of adding two other capabilities respectively in the applications for protecting access to the second object.

3. A method according to claim 2, wherein the capability for access to the second object belonging to one of the applications is passed as a parameter or as a result to the other application.

4. A method according to claim 1 including the steps of exporting a capability from one application to the other application by associating it with a symbolic name, and importing the exported access capability in the other application by interrogating a name server with the symbolic name.

5. A method according to claim 1, wherein the applications are established in a common data processing means.

6. A method according to claim 1, wherein the applications are established in two distinct data processing means exchanging messages for access to distant objects.

7. A method according to claim 2, wherein the applications are established in two distinct data processing means exchanging messages for access to distant objects.

8. A method according to claim 7, wherein the step of adding two other capabilities comprises the storage of a secret word in the other two capabilities that is passed to said other two capabilities by the two previously created capabilities.

9. A method according to claim 6 wherein the data processing means are included respectively in a chip card and a station accepting the chip card.

10. A method according to claim 6 wherein the data processing means are included respectively in two chip cards.

11. An application generating method, comprising the following steps:

developing an application comprising at least one object, without restriction on access;

defining rules on rights of access to the object included within the application from a second application;

transforming the application comprising the object by adding to said application means of filtering the accesses to said object and;

establishing the transformed application within a data processing means.

12. A method according to claim 11 wherein the data processing means is included in a chip card.

13. A method according to claim 11, wherein the data processing means is included in a station accepting the chip card.