Integrating user specified extensions into an information access system

• US 7,155,737 B1
• Filed: 05/11/1999
• Issued: 12/26/2006
• Est. Priority Date: 05/11/1999
• Status: Expired due to Term

• Current Assignee: Entrust Corp.
• Original Assignee: Entrust Incorporated (Entrust Corp.)
• Inventors: Belmonte, Emilio, Win, Teresa, Lim, Mario
• Primary Examiner(s): Sheikh, Ayaz
• Assistant Examiner(s): Jackson, Jenise E.
• Application Number:
  US09/309,360
• Time in Patent Office: 2,786 Days
• Field of Search: 713200-202, 713/182, 713/166, 713/167, 709223-229, 726/2
• US Class Current: 726/2
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

A method and apparatus is provided for securely executing access control functions that may be customized by or on behalf of administrators of information access systems. Examples of such functions include changing a password of a user, determining whether or not data specifying a user and a password identifies an authentic user, and displaying a message indicating whether a login attempt was successful. An access control function is mapped to a digital signature. The digital signature is used to verify that an executable element retrieved for executing the access control function is the proper executable element. The access control functions may be invoked upon the occurrence of access control events, such as a user successfully logging onto an information access system or the modification of a user'"'"'s password. A mapping contains data used to determine what events are tied to what access control functions, and whether the access control function should be executed. Upon the occurrence of an extension event that is tied to an extension, an executable element for the extension is retrieved. After executing an extension, data is returned to the caller of the extension. The returned data may be a hash table that includes other objects, such as strings or even other hash tables. The access control functions are developed in manner that exploits the power and simplicity of the inheritance feature of object oriented programming.

Claims

1. A method of securely invoking an access control function, the method comprising the steps of:

receiving a digital signature for the access control function;

generating a mapping of the access control function to the digital signature;

determining that the digital signature is mapped to the access control function based on the mapping when execution of the access control function is requested;

generating a plurality of records mapping access control events to access control functions along with an indication whether access control function invocation is active for each mapped access control event wherein said plurality of records are stored in a configuration file;

detecting that an access control event related to controlling access to information resources on a computer system has occurred;

determining that the access control event is mapped to the access control function;

retrieving an executable element if the access control event is mapped to the access control function and if access control function invocation is active for the access control event;

generating a digital signature for the retrieved executable element;

determining whether the retrieved executable element matches the access control function by comparing the digital signature of the retrieved executable element and the digital signature for the access control function; and

executing the retrieved executable element only when the retrieved executable element matches the access control function.

2. The method of claim 1,

wherein a particular class defines an implementation of the access control function;

wherein the step of receiving a digital signature includes the step of receiving a digital signature for the particular class; and

wherein the step of generating a mapping includes generating a mapping between the particular class and the digital signature.

3. The method of claim 1, wherein the step of returning data further includes the executable element returning name-value pairs.

4. The method of claim 1, wherein the step of returning data includes the executable element returning a hash table that contains the name-value pairs.

5. The method of claim 1, wherein the method further includes the steps of:

generating a mapping of a plurality of access control functions to digital signatures, wherein the plurality of access control functions include the access control function, wherein one or more classes define an implementation for each of the plurality of access control functions; and

wherein each of the one or more classes belong to a superclass.

6. The method of claim 5, further including the step of invoking a routine defined by a superclass that collects data to return to a caller of the particular class.

7. The method of claim 6, wherein the step of executing the executable element includes invoking a routine defined for the superclass.

8. The method of claim 1, wherein the step of retrieving an executable element includes retrieving byte code.

9. The method of claim 8, wherein the step of retrieving byte code includes retrieving Java byte code.

10. The method of claim 1, wherein the step of retrieving an executable element includes a first computer system retrieving byte code transmitted via a local area network from a second computer system.

11. An access control system, comprising:

a processor;

a memory coupled to the processor;

a first mapping that maps each of a set of access control functions to a digital signature of that access control function;

the processor configured to retrieve an executable element in response to a request to execute a first access control function;

the processor configured to generate a plurality of records mapping access control events to access control functions along with an indication whether access control function invocation is active for each mapped access control event wherein said plurality of records are stored in a configuration file;

the processor configured to detect that an access control event related to controlling access to information resources on a computer system has occurred;

the processor configured to determine that the access control event is mapped to the access control function;

the processor configured to retrieve an executable element if the access control event is mapped to the access control function and if access control function invocation is active for the access control event;

the processor configured to generate a digital signature for the retrieved executable element;

the processor configured to determine whether the retrieved executable element matches the first access control function by comparing the digital signature of the retrieved executable element and the digital signature for the first access control function; and

the processor configured to execute the retrieved executable element when the retrieved executable element matches the first access control function.

12. The access control system of claim 11,

wherein the first mapping maps a class implementing one of the set of access control functions to a digital signature.

13. The access control system of claim 11, wherein the executable element returns name-value pairs as data.

14. The access control system of claim 11, wherein the executable element returns a hash table as data that contains the name-value pairs.

15. The access control system of claim 11,

wherein the processor is configured to generate a mapping of a plurality of access control functions to digital signatures;

wherein the plurality of access control functions include the access control function, wherein one or more classes define an implementation for each of the plurality of access control functions; and

wherein each of the one or more classes belong to a superclass.

16. The access control system of claim 15, further comprising said processor configured to invoke a routine defined by a superclass that collects data to return to a caller of the particular class.

17. The access control system of claim 16, wherein said processor is configured to execute the executable element by invoking a routine defined for the superclass.

18. The access control system of claim 17, wherein said executable element is byte code.

19. The access control system of claim 18, wherein said byte code includes Java byte code.

20. The access control system of claim 19, wherein said processor is configure to retrieve an executable element by retrieving byte code transmitted via a local area network.

21. A computer-readable medium carrying one or more sequences of one or more instructions for securely invoking an access control function, the one or more sequences of one or more instructions including instructions which, when executed by one or more processors, cause the one or more processors to perform the steps of:

receiving a digital signature for the access control function;

generating a mapping of the access control function to the digital signature;

determining that the digital signature is mapped to the access control function based on the mapping when execution of the access control function is requested;

generating a plurality of records mapping access control events to access control functions along with an indication whether access control function invocation is active for each mapped access control event wherein said plurality of records are stored in a configuration file;

detecting that an access control event related to controlling access to information resources on a computer system has occurred;

determining that the access control event is mapped to the access control function;

retrieving an executable element if the access control event is mapped to the access control function and if access control function invocation is active for the access control event;

generating a digital signature for the retrieved executable element;

determining whether the retrieved executable element matches the access control function by comparing the digital signature of the retrieved executable element and the digital signature for the access control function; and

executing the retrieved executable element only when the retrieved executable element matches the access control function.

22. The computer-readable medium of claim 21,

wherein a particular class defines an implementation of the access control function;

wherein the step of receiving a digital signature includes the step of receiving a digital signature for the particular class; and

wherein the step of generating a mapping includes generating a mapping between the particular class and the digital signature.

23. The computer-readable medium of claim 21, wherein the step of returning data further includes sequences of instructions for performing the step of the executable element returning name-value pairs.

24. The computer-readable medium of claim 21, wherein the step of returning data includes the executable element returning a hash table that contains the name-value pairs.

25. The computer-readable medium of claim 21, wherein the computer-readable medium further includes sequences of instructions for performing the steps of:

generating a mapping of a plurality of access control functions to digital signatures, wherein the plurality of access control functions include the access control function, wherein one or more classes define an implementation for each of the plurality of access control functions; and

wherein each of the one or more classes belong to a superclass.

26. The computer-readable medium of claim 25, further including sequences of instructions for performing the step of invoking a routine defined by a superclass that collects data to return to a caller of the particular class.

27. The computer-readable medium of claim 26, wherein the step of executing the executable element includes invoking a routine defined for the superclass.

28. The computer-readable medium of claim 21, wherein the step of retrieving an executable element includes retrieving byte code.

29. The computer-readable medium of claim 28, wherein the step of retrieving byte code includes retrieving Java byte code.

30. The computer-readable medium of claim 21, wherein the step of retrieving an executable element includes a first computer system retrieving byte code transmitted via a local area network from a second computer system.