US5878417A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and apparatus for network security in browser based interfaces
Assignee: International Business Machines Corp
•
Filing: 1996-11-20
•
Granted: 1999-03-02
•
Expires: 2016-11-20
Abstract
Abstract A method and apparatus for improving security for a workstation accessing network resources through a web browser interface. A three step procedure is provided on the workstation for testing the origin and filetype extensions of command files, retrieved by a web browser, to determine whether they may be executed on the workstation. Step one of the invention consists of creating a non-standard command filetype extension on the workstation to be protected. This is followed by step two which isolates specific network or system resources for all approved command files. Finally, step three protects the command file contents and sub-directory locations on the protected workstation. The invention grants execute permission for an application file command files only when all three conditions of the above steps are met.
Inventors
- 👤 Wayne Ross Baldwin
- 👤 Carol Sue Christensen
- 👤 Robert Kimberlin Foster
- 👤 Athanasios Gaitatzes
- 👤 Sharad Janardhan Naik
- 👤 Richard Dennis Talbot
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-05 09:24
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/50; G06F21/51; G06F21/55; G06F21/56; G06F21/562
Claims Analysis
Total Claims: 15
Claim 1
Independent Claim
142 words
A method, implemented in a computer system, for determining execution permission for an application program retrieved by a web browser within a client's workstation in a network operating environment, comprising the steps of: creating a non-standard command filetype extension for all command files in said client's workstation in said network operating environment containing said application program; creating a unique filetype extension in said client's workstation having protection and permission information for said application program, said unique file type extension different from said non-standard command filetype; receiving at said client's workstation in said network operating environment said application program retrieved by said web browser; testing the content and source of said application program received at said client's workstation for said unique filetype extension; and executing said application program at said client's workstation by said web browser based on said protection and permission information.
Claim 2
Independent Claim
142 words
A method, implemented in a computer system, for determining execution permission for an application program retrieved by a web browser within a client's workstation in a network operating environment, comprising the steps of: creating a non-standard command filetype extension for all command files in said client's workstation in said network operating environment containing said application program; creating a unique filetype extension in said client's workstation having protection and permission information for said application program, said unique file type extension different from said non-standard command filetype; receiving at said client's workstation in said network operating environment said application program retrieved by said web browser; testing the content and source of said application program received at said client's workstation for said unique filetype extension; and executing said application program at said client's workstation by said web browser based on said protection and permission information.
Claim 3
Dependent Claim
30 words
The method of claim 1, wherein the step of creating a unique filetype extension comprises the step of: assigning read-only protection for said unique filetype extension in said client's workstation.
Claim 4
Dependent Claim
35 words
The method of claim 1, wherein the step of creating a unique filetype extension comprises the step of: assigning a unique file extension to a command file of said application program in said client's workstation.
Claim 5
Dependent Claim
52 words
The method of claim 1, wherein the step of testing the context and source of said application program comprises the steps of: determining if an executable command of said application file is of local origin; and passing permission to said web browser to execute said application file locally on said client's workstation.
Claim 6
Independent Claim
144 words
An apparatus for determining execution permission for an application program retrieved by a web browser within a client's workstation in a network operating environment, comprising: means for creating a non-standard command filetype extension for all command files in said client's workstation in said network operating environment containing said application program; means for creating a unique filetype extension in said client's workstation having protection and permission information for said application program, said unique file type extension different from said non-standard command filetype; means for receiving at said client's workstation in said network operating environment said application program retrieved by said web browser; means for testing the content and source of said application program received at said client's workstation for said unique filetype extension; and means for executing said application program at said client's workstation by said web browser based on said protection and permission information.
Claim 7
Independent Claim
144 words
An apparatus for determining execution permission for an application program retrieved by a web browser within a client's workstation in a network operating environment, comprising: means for creating a non-standard command filetype extension for all command files in said client's workstation in said network operating environment containing said application program; means for creating a unique filetype extension in said client's workstation having protection and permission information for said application program, said unique file type extension different from said non-standard command filetype; means for receiving at said client's workstation in said network operating environment said application program retrieved by said web browser; means for testing the content and source of said application program received at said client's workstation for said unique filetype extension; and means for executing said application program at said client's workstation by said web browser based on said protection and permission information.
Claim 8
Dependent Claim
29 words
The apparatus of claim 5, wherein the means for creating a unique filetype extension comprises: means for assigning read-only protection for said unique filetype extension in said client's workstation.
Claim 9
Dependent Claim
34 words
The apparatus of claim 5, wherein the means for creating a unique filetype extension comprises: means for assigning a unique file extension to a command file of said application program in said client's workstation.
Claim 10
Dependent Claim
53 words
The apparatus of claim 5, wherein the means for testing the context and source of said application program comprises: means for determining if an executable command of said application file is of local origin; and means for passing permission to said web browser to execute said application file locally on said client's workstation.
Claim 11
Dependent Claim
165 words
A computer program product having a computer readable medium having computer program logic recorded thereon for determining execution permission for an application program retrieved by a web browser within a client's workstation in a network operating environment, comprising: computer readable means for creating a non-standard command filetype extension for all command files in said client's workstation in said network operating environment containing said application program; computer readable means for creating a unique filetype extension in said client's workstation having protection and permission information for said application program, said unique filetype different from said non-standard command filetype; computer readable means for receiving at said client's workstation in said network operating environment said application program retrieved by said web browser; computer readable means for testing the content and source of said application program received at said client's workstation for said unique filetype extension; and computer readable means for executing said application program at said client's workstation by said web browser based on said protection and permission information.
Claim 12
Dependent Claim
165 words
A computer program product having a computer readable medium having computer program logic recorded thereon for determining execution permission for an application program retrieved by a web browser within a client's workstation in a network operating environment, comprising: computer readable means for creating a non-standard command filetype extension for all command files in said client's workstation in said network operating environment containing said application program; computer readable means for creating a unique filetype extension in said client's workstation having protection and permission information for said application program, said unique filetype different from said non-standard command filetype; computer readable means for receiving at said client's workstation in said network operating environment said application program retrieved by said web browser; computer readable means for testing the content and source of said application program received at said client's workstation for said unique filetype extension; and computer readable means for executing said application program at said client's workstation by said web browser based on said protection and permission information.
Claim 13
Dependent Claim
34 words
The computer program of claim 9, wherein the computer readable means for creating a unique filetype extension comprises: computer readable means for assigning read-only protection for said unique filetype extension in said client's workstation.
Claim 14
Dependent Claim
39 words
The computer program of claim 9, wherein the computer readable means for creating a unique filetype extension comprises: computer readable means for assigning a unique file extension to a command file of said application program in said client's workstation.
Claim 15
Dependent Claim
60 words
The computer program of claim 9, wherein the computer readable means for testing the context and source of said application program comprises: computer readable means for determining if an executable command of said application file is of local origin; and computer readable means for passing permission to said web browser to execute said application file locally on said client's workstation.
References Cited (Backward Citations)
US5155827A
Cited
US5319776A
Cited
US5421006A
Cited
US5412717A
Cited
US5359659A
Cited
US5454000A
Cited
US5724425A
Cited
US5550984A
Cited
US5732219A
Cited
US5708780A
Cited
US5721908A
Cited
US5701451A
Cited
US5737592A
Cited
US5623600A
Cited
US5737533A
Cited
US5737560A
Cited
US5734831A
Cited
US5732216A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2002-03-01 | 2002-08-31 | 2003-03-02 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2006-03-01 | 2006-08-31 | 2007-03-02 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2010-03-01 | 2010-08-31 | 2011-03-02 | $7700.00 | Window Closed / Lapsed |