Trust management systems and methods

• US 9,077,545 B2
• Filed: 11/04/2013
• Issued: 07/07/2015
• Est. Priority Date: 05/19/2000
• Status: Expired due to Term

• Current Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Original Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Inventors: Weeks, Stephen P., Serret-Avila, Xavier
• Primary Examiner(s): Truong, Thanhnga B
• Application Number:
  US14/071,586
• Publication Number:
  US 20140068249A1
• Time in Patent Office: 610 Days
• Field of Search: 726/1, 726/2, 726/8, 713/156, 713/175, 713/182, 380/45, 380/277
• US Class Current: 1/1
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

The present invention provides systems and methods for making efficient trust management decisions. A trust management engine is provided that processes requests for system resources, authorizations or certificates, and the identity of one or more root authorities that are ultimately responsible for granting or denying the requests. To determine whether a request should be granted, the trust management engine identifies a set principals from whom authorization may flow, and interprets each of the certificates as a function of the state of one or more of the principals. The processing logic iteratively evaluates the functions represented by the certificates, updates the states of the principals, and repeats this process until a reliable determination can be made as to whether the request should be granted or denied. The certificates may be evaluated until the state of the root authority indicates that the request should be granted, or until further evaluation of the certificates is ineffective in changing the state of the principals.

Claims

1. A method for performing trust management decisions performed by a computer system comprising a processor and a communicatively coupled non-transitory computer-readable storage medium storing instructions that, when executed by the processor, cause the processor to perform the method, the method including:

collecting, from other systems, a group of certificates, each certificate including at least one authorization associated with at least one principal;

expressing authorizations using a structure that satisfies certain predefined properties;

expressing each certificate as a function, wherein each function possesses one or more properties sufficient to ensure that a set of authorizations will have a fixpoint;

computing a fixpoint of the authorizations, or an approximation thereof; and

making a trust management decision using the result of said computing step.

3. A method as in claim 1, in which the structure is chosen such that it provides an ordering for authorizations, a way to combine authorizations, and a way to express certificates as monotone functions.

2. A method as in 1, in which the structure comprises a lattice.

4. A method as in claim 2, in which the one or more properties sufficient to ensure that a set of authorizations will have a fixpoint includes the property that each function is monotone.

5. A system for controlling access to electronic content or processing resources, the system comprising:

an interface configured to receive a request from a requesting principal to access a piece of electronic content or a processing resource;

a processor communicatively coupled to the interface; and

a non-transitory computer readable medium communicatively coupled to the interface and the processor storing instructions that, when executed by the processor, cause the processor to;

collect a set of one or more certificates relating to the request, the requesting principal, or the electronic content or processing resource;

idenitfy a root principal from whom authorization is needed in order to grant the request;

perform at least a portion of a least fixpoint computation over said certificates to determine whether the root principal has authorized access to the piece of electronic content or processing resource by the requesting principal; and

grant access to the electronic content or processing resource if the least fixpoint computation indicates that the root principal has authorized said access.