Patent US5701458A successfully refreshed from Google Patents.
US5701458A
Expired / Lapsed
US
⏱️ 0.0 years remaining
System and method for managing arbitrary subsets of access control lists in a computer network
Assignee: International Business Machines Corp
•
Filing: 1995-09-20
•
Granted: 1997-12-23
•
Expires: 2015-09-20
Abstract
Abstract A system and method for managing access control lists (ACL) in a data processing system with a hierarchical object structure permits manipulation of an arbitrary set of ACLs and individual entries within an ACL. A set of actions covering all possible entry updates provides flexibility in manipulating ACLs and removing latent ambiguity. By permitting operation on the arbitrary set of ACLs rather than a resource tree, heterogeneous trees remain after the apply function. A mechanism is provided for identifying specific failures of ACL updates by resource name and error, thereby permitting correction without necessitating re-running the entire apply function.
Inventors
- 👤 Mounir Emile Bsaibes
- 👤 Timothy Roger Kells
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-30 15:00
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/10; H04L63/101; G; G06; G06F; G06F21/00; G06F21/60; G06F21/62; G06F21/6218; H04L63/20; H04L9/00; H04L9/40; G06F12/00; G06F12/14; G06F12/1458; G06F12/1483; G06F2221/00; G06F2221/21; G06F2221/2141
Claims Analysis
Total Claims: 22
Claim 1
Independent Claim
67 words
For use in a data processing system having hierarchically structured access control lists (ACL), each with entries comprising a plurality of actions and data, a computerized method for managing said ACLs, comprising: editing a selected subset of said ACLs; executing an apply function on said ACLs; and generating, in response to said executing, a heterogeneous group of said ACLs corresponding to said selected subset of said ACLs.
Claim 2
Dependent Claim
67 words
For use in a data processing system having hierarchically structured access control lists (ACL), each with entries comprising a plurality of actions and data, a computerized method for managing said ACLs, comprising: editing a selected subset of said ACLs; executing an apply function on said ACLs; and generating, in response to said executing, a heterogeneous group of said ACLs corresponding to said selected subset of said ACLs.
Claim 3
Dependent Claim
20 words
The method of claim 1 wherein said data is taken from the group comprising users, groups, entry ids, and permissions.
Claim 4
Dependent Claim
67 words
The method of claim 2 wherein said actions are selected from the group comprising entry -- change -- user, entry -- change -- group, entry -- create, entry -- delete, entry -- replace, entry -- modify -- add, entry -- modify -- delete, entry -- add -- or -- create, entry -- modify -- add, entry -- replace -- or -- create, entry -- replace -- add.
Claim 5
Dependent Claim
32 words
The method of claim 3 wherein said editing said selected subset of ACLs comprises: editing at least two said ACLs to each contain a different said permission for one of said users.
Claim 6
Dependent Claim
20 words
The method of claim 4 wherein said data for said user is a current user and a corresponding new user.
Claim 7
Dependent Claim
20 words
The method of claim 5 wherein said data for said group is a current group and a corresponding new group.
Claim 8
Dependent Claim
59 words
The method of claim 6 further including specifying in a table a universal user id having associated therewith a first user and said subset of edited ACLs; editing said table to substitute a second user for said first user; and in response to said editing, automatically reassigning all said edited ACLs from said first user to said second user.
Claim 9
Dependent Claim
56 words
The method of claim 7 including establishing an error buffer; identifying, in response to said executing of said apply function, selected ones of said edited selected subset of said ACLs which fail during said executing; and writing to said buffer a resource name and error corresponding to each said identified one of said ACLs which fail.
Claim 10
Dependent Claim
50 words
The method of claim 8 wherein said selected subset of said ACLs is selected by steps comprising: specifying a resource name as a root of a tree containing a plurality of objects; iterating on said tree to locate a subset of said objects; and operating upon said subset of objects.
Claim 11
Dependent Claim
58 words
The method of claim 8 wherein said selected subset of said ACLs is selected by the steps comprising: specifying a set of resource names each having associated therewith a corresponding one of said ACLs; iterating on said set; and updating each said corresponding one of said ACLs for each of said resource names in response to said iterating.
Claim 12
Dependent Claim
67 words
The apparatus of claim 2 wherein said actions are selected from the group comprising entry -- change -- user, entry -- change -- group, entry -- create, entry -- delete, entry -- replace, entry -- modify -- add, entry -- modify -- delete, entry -- add -- or -- create, entry -- modify -- add, entry -- replace -- or -- create, entry -- replace -- add.
Claim 13
Dependent Claim
36 words
The apparatus of claim 11 wherein said means for editing said selected subset of ACLs comprises: means for editing at least two said ACLs to each contain a different said permission for one of said users.
Claim 14
Dependent Claim
20 words
The apparatus of claim 12 wherein said data for said user is a current user and a corresponding new user.
Claim 15
Dependent Claim
20 words
The apparatus of claim 13 wherein said data for said group is a current group and a corresponding new group.
Claim 16
Dependent Claim
67 words
The apparatus of claim 14 further including means for specifying in a table a universal user id having associated therewith a first user and said subset of edited ACLs; means for editing said table to substitute a second user for said first user; and means for automatically re-assigning, in response to said means for editing, all said edited ACLs from said first user to said second user.
Claim 17
Dependent Claim
62 words
The apparatus of claim 15 including means for establishing an error buffer; means for identifying, in response to said executing of said apply function, selected ones of said edited selected subset of said ACLs which fail during said executing; and means for writing to said buffer a resource name and error corresponding to each said identified one of said ACLs which fail.
Claim 18
Dependent Claim
55 words
The apparatus of claim 16 wherein said means for selecting said subset of said ACLs comprises: means for specifying a resource name as a root of a tree containing a plurality of objects; means for iterating on said tree to locate a subset of said objects; and means for operating upon said subset of objects.
Claim 19
Dependent Claim
62 words
The apparatus of claim 16 wherein said means for selecting said subset of said ACLs comprises: means for specifying a set of resource names each having associated therewith a corresponding one of said ACLs; means for iterating on said set; and means for updating each said corresponding one of said ACLs for each of said resource names in response to said iterating.
Claim 20
Dependent Claim
74 words
Apparatus for use in a data processing system having hierarchically structured access control lists (ACL), each with entries comprising a plurality of actions and data, a computerized method for managing said ACLs, comprising: means for editing a selected subset of said ACLs; means for executing an apply function on said ACLs; and means for generating, in response to said executing, a heterogeneous group of said ACLs corresponding to said selected subset of said ACLs.
Claim 21
Dependent Claim
74 words
Apparatus for use in a data processing system having hierarchically structured access control lists (ACL), each with entries comprising a plurality of actions and data, a computerized method for managing said ACLs, comprising: means for editing a selected subset of said ACLs; means for executing an apply function on said ACLs; and means for generating, in response to said executing, a heterogeneous group of said ACLs corresponding to said selected subset of said ACLs.
Claim 22
Dependent Claim
20 words
The apparatus of claim 19 wherein said data is taken from the group comprising users, groups, entry ids, and permissions.
References Cited (Backward Citations)
US5313646A
Cited
US5265221A
Cited
US5335346A
Cited
US5297283A
Cited
US5321841A
Cited
US5315657A
Cited
US5283830A
Cited
US5584022A
Cited
US5469576A
Cited
US5495521A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2000-12-22 | 2001-06-23 | 2001-12-23 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2004-12-22 | 2005-06-23 | 2005-12-23 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2008-12-22 | 2009-06-23 | 2009-12-23 | $7700.00 | Window Closed / Lapsed |