Method for controlling access to a resource of an application in a data-processing device

• US 7,502,794 B2
• Filed: 05/28/2004
• Issued: 03/10/2009
• Est. Priority Date: 05/28/2003
• Status: Expired due to Fees

• Current Assignee: Robert Bosch GmbH
• Original Assignee: Robert Bosch GmbH
• Inventors: May, Thomas, Walossek, Erik, Hornburg, Bjoern, Pelz, Rodolfo Mann
• Primary Examiner(s): Lee; Wilson
• Application Number:
  US10/856,059
• Publication Number:
  US 20050010528A1
• Time in Patent Office: 1,747 Days
• Field of Search: 713/176, 713/201, 713/155, 707 1- 10
• US Class Current: 1/1
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2147 Locking files
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: Y10S 707/99939 Privileged access

Abstract

A method for controlling access to a resource of an application in a data-processing device, comprising the steps: registering an access interface of an access-management component at the data-processing device; request by a first application for an access to the access interface of the access-management component at the data-processing device; registering of a resource of the first application at the access-management component actuation of a second application by a user which requests access to the resource of the first application; sending an access-authorization query of the first application about the user to the access-management component; and, given authorization of the user, granting access to the resource of the first application by the second application.

Claims

1. A method for controlling access to a resource of an application in a data-processing device, comprising the steps:

registering an access interface of an access-management component at the data-processing device;

requesting access to the access interface of the access-management component at the data-processing device by a first software program;

registering a resource of the first software program at the access-management component;

actuating a second software program by a user who requests access to the resource of the first software program;

sending an access-authorization query of the first software program about the user to the access-management component; and

given authorization of the user, granting access to the resource of the first software program by the second software program.

2. The method as recited in claim 1, further comprising:

after the resource of the first software program has been registered, defining by an administrator access rights for the resource of the first software program.

3. The method as recited in claim 1, wherein:

at least one predetermined user at least one of sets up additional users with access rights and establishes the access rights for other users.

4. The method as recited in claim 1, further comprising:

addressing a priority query to the access-management component in order to establish a sequence of a plurality of users according to at least one of their access rights and their priority rights.

5. The method as recited in claim 1, wherein:

the access-management component registers the access interface as an application in an application framework of at least one of an OSGI-based system and a JAVA-based system.

6. The method as recited in claim 1, wherein:

a text that describes the resource, as well as a definition of a setting of the access rights are handed over when registering the resource of the first software program.

7. The method as recited in claim 1, wherein:

a plurality of resources including a plurality of applications are registered with a single registration.

8. A method for controlling access to a resource of an application in a data-processing device, comprising the steps:

registering an access interface of an access-management component at the data-processing device;

requesting from the data-processing device access to the access interface of the access-management component by a first software program;

responsive to the first software program receiving grant of access to the access interface, the first software program registering a resource of the first software program at the access-management component;

actuating a second software program by a user, the second software program requesting access to the resource of the first software program;

responsive to the access request of the second software program, sending, by the first software program, an access-authorization query about the user to the access-management component via the access interface; and

given authorization of the user, the first application granting to the second software program access to the resource of the first software program.