Patent US6158010A successfully refreshed from Google Patents.
US6158010A
Expired / Lapsed
US
⏱️ 0.0 years remaining
System and method for maintaining security in a distributed computer network
Assignee: Oracle International Corp
•
Filing: 1999-02-12
•
Granted: 2000-12-05
•
Expires: 2019-02-12
Abstract
Abstract A system and method for maintaining security in a distributed computing environment comprises a policy manager located on a server for managing and distributing a security policy, and an application guard located on a client for managing access to securable components as specified by the security policy. In the preferred embodiment, a global policy specifies access privileges of the user to securable components. The policy manager may then preferably distribute a local client policy based on the global policy to the client. An application guard located on the client then manages access to the securable components as specified by the local policy.
Inventors
- 👤 Mark Moriconi
- 👤 Shelly Qian
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-30 14:10
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/02; H04L63/0227; H04L63/0263; G; G06; G06F; G06F21/00; G06F21/50; G06F21/55; G06F21/552; G06F21/60; G06F21/604; G06F21/62; G06F21/6218; H04L63/10; H04L63/102; H04L63/105; H04L63/14; H04L63/1408; H04L63/1425; G06F2221/00; G06F2221/21; G06F2221/2111; G06F2221/2117; G06F2221/2141; G06F2221/2145; G06F2221/2149; G06F2221/2151; Y; Y10; Y10S; Y10S707/00; Y10S707/99931; Y10S707/99939
Claims Analysis
Total Claims: 62
Claim 1
Independent Claim
81 words
A system for maintaining security in a distributed computing environment, comprising: a policy manager for managing a security policy; and an application guard for managing access to securable components as specified by the security policy, said securable components being selected from the group consisting of at least one application, a function within an application, a procedure within an application, a data structure within an application, a database object referenced by an application, or a file system object referenced by an application.
Claim 2
Independent Claim
81 words
A system for maintaining security in a distributed computing environment, comprising: a policy manager for managing a security policy; and an application guard for managing access to securable components as specified by the security policy, said securable components being selected from the group consisting of at least one application, a function within an application, a procedure within an application, a data structure within an application, a database object referenced by an application, or a file system object referenced by an application.
Claim 3
Dependent Claim
20 words
The system of claim 1, wherein said policy manager comprises a management station for constructing and editing the security policy.
Claim 4
Dependent Claim
21 words
The system of claim 2, wherein said policy manager further comprises a distributor for distributing the security policy to a client.
Claim 5
Dependent Claim
27 words
The system of claim 2, wherein said policy manager further comprises a distributor for distributing a customized local policy based on the security policy to a client.
Claim 6
Dependent Claim
25 words
The system of claim 4, wherein said policy manager further comprises a logger for recording and tracking authorization events that occur through the application guard.
Claim 7
Dependent Claim
20 words
The system of claim 4, wherein the policy manager further comprises a database management system for maintaining the security policy.
Claim 8
Dependent Claim
12 words
The system of claim 4, wherein the customized local policy is optimized.
Claim 9
Dependent Claim
56 words
The system of claim 1, wherein said system is scalable by further comprising a plurality of clients, said policy manager further managing and distributing a customized local policy to each client, and at least one additional application guard located on each client for managing access to the securable components as specified by each customized local policy.
Claim 10
Dependent Claim
51 words
The system of claim 1, wherein said application guard includes an application guard interface coupled to an application for requesting access to the securable components, and at least one authorization engine for evaluating requests from the application guard interface as specified by a customized local policy based on the security policy.
Claim 11
Dependent Claim
33 words
The system of claim 9, wherein said application guard interface is located on a client, and said at least one authorization engine and said customized local policy are located on a client server.
Claim 12
Dependent Claim
28 words
The system of claim 1, wherein the security policy is defined by a policy language to grant or deny access to the securable components for a particular user.
Claim 13
Dependent Claim
19 words
The system of claim 1 further comprising a policy loader for bulk loading the security policy onto the system.
Claim 14
Dependent Claim
22 words
The system of claim 1, wherein said policy manager includes a set of menu options to manage and distribute the security policy.
Claim 15
Dependent Claim
24 words
The system of claim 13, wherein said set of menu options include: navigate tree, analyze policy, edit policy, distribute policy, and view audit log.
Claim 16
Dependent Claim
27 words
The system of claim 1, wherein the application guard further allows for additional customized code to process and evaluate authorization requests based on the additional customized code.
Claim 17
Dependent Claim
30 words
The system of claim 1, wherein the policy manager further includes a policy manager application guard for managing access to the policy manager as specified by a local administrative policy.
Claim 18
Independent Claim
115 words
A system for controlling user access in a distributed computing environment, comprising: a global policy specifying access privileges of the user to securable components; a policy manager located on a server for managing and distributing a local client policy based on the global policy to a client, and an application guard located on the client for managing access to the securable components as specified by the local client policy, said securable components being selected from the group consisting of at least one application, a function within an application, a procedure within an application, a data structure within an application, a database object referenced by an application, or a file system object referenced by an application.
Claim 19
Independent Claim
115 words
A system for controlling user access in a distributed computing environment, comprising: a global policy specifying access privileges of the user to securable components; a policy manager located on a server for managing and distributing a local client policy based on the global policy to a client, and an application guard located on the client for managing access to the securable components as specified by the local client policy, said securable components being selected from the group consisting of at least one application, a function within an application, a procedure within an application, a data structure within an application, a database object referenced by an application, or a file system object referenced by an application.
Claim 20
Dependent Claim
58 words
The system of claim 17 further comprising at least one additional client, said policy manager further managing and distributing a customized local policy based on the global policy to each additional client, and at least one additional application guard located on each additional client for managing access to the securable components as specified by the customized local policy.
Claim 21
Dependent Claim
31 words
The system of claim 17, wherein said policy manager comprises: a management station for constructing and editing the global policy; and a distributor for distributing the local policy to the client.
Claim 22
Dependent Claim
20 words
The system of claim 19, wherein said policy manager further comprises a database management system for maintaining the global policy.
Claim 23
Dependent Claim
25 words
The system of claim 17, wherein said policy manager further comprises a logger for recording and tracking authorization events that occur through the application guard.
Claim 24
Dependent Claim
28 words
The system of claim 17, wherein the global policy is defined by a policy language to grant or deny access to the securable components for a particular user.
Claim 25
Dependent Claim
56 words
The system of claim 17, wherein said system is scalable by further comprising a plurality of clients, said policy manager further managing and distributing a customized local policy to each client, and at least one additional application guard located on each client for managing access to the securable components as specified by each customized local policy.
Claim 26
Dependent Claim
46 words
The system of claim 17, wherein said application guard includes an application guard interface coupled to an application for requesting access to the securable components, and at least one authorization engine for evaluating requests from the application guard interface as specified by the local client policy.
Claim 27
Dependent Claim
20 words
The system of claim 17 further comprising a policy bulk loader for bulk loading the global policy onto the system.
Claim 28
Dependent Claim
12 words
The system of claim 17, wherein the local client policy is optimized.
Claim 29
Dependent Claim
27 words
The system of claim 17, wherein the application guard further allows for additional customized code to process and evaluate authorization requests based on the additional customized code.
Claim 30
Dependent Claim
30 words
The system of claim 17, wherein the policy manager further includes a policy manager application guard for managing access to the policy manager as specified by a local administrative policy.
Claim 31
Independent Claim
67 words
A system for authorization that provides access to securable components for a user, comprising: a policy specifying access privileges of the user to the securable components; an application guard that allows for additional customized code to process and evaluate authorization requests based on the additional customized code; and a processor coupled to said system, said processor executing said application guard to manage access to the securable components.
Claim 32
Independent Claim
67 words
A system for authorization that provides access to securable components for a user, comprising: a policy specifying access privileges of the user to the securable components; an application guard that allows for additional customized code to process and evaluate authorization requests based on the additional customized code; and a processor coupled to said system, said processor executing said application guard to manage access to the securable components.
Claim 33
Dependent Claim
23 words
The system of claim 29 further including an audit log for recording and tracking each authorization event that occurs though the application guard.
Claim 34
Dependent Claim
52 words
The system of claim 29, wherein said securable components are selected from the group consisting of: at least one application, a function within an application, a procedure within an application, a data structure within an application, a database object referenced by an application, or a file system object referenced by an application.
Claim 35
Dependent Claim
28 words
The system of claim 29, wherein said application guard comprises an application guard interface connected to an application for managing access to the securable components in said application.
Claim 36
Dependent Claim
50 words
The system of claim 29, wherein said application guard includes an application guard interface coupled to an application for requesting access to the securable components, and at least one authorization engine for evaluating requests from the application guard interface as specified by a customized local policy based on the policy.
Claim 37
Dependent Claim
33 words
The system of claim 33, wherein said application guard interface is located on a client, and said at least one authorization engine and said customized local policy are located on a client server.
Claim 38
Independent Claim
91 words
A system for managing security in a distributed computing environment, comprising: a policy manager specifying access priveleges to securable components selected from the group consisting of at least one application, a function within an application, a procedure within an application, a data structure within an application, a database object referenced by an application, or a file system object referenced by an application; and a processor coupled to said system, said processor executing said policy manager to manage and distribute a customized local policy based on a global policy to a client.
Claim 39
Independent Claim
91 words
A system for managing security in a distributed computing environment, comprising: a policy manager specifying access priveleges to securable components selected from the group consisting of at least one application, a function within an application, a procedure within an application, a data structure within an application, a database object referenced by an application, or a file system object referenced by an application; and a processor coupled to said system, said processor executing said policy manager to manage and distribute a customized local policy based on a global policy to a client.
Claim 40
Dependent Claim
20 words
The system of claim 35, wherein said policy manager comprises a management station for constructing and editing the global policy.
Claim 41
Dependent Claim
22 words
The system of claim 36, wherein said policy manager further comprises a distributor for distributing the customized local policy to the client.
Claim 42
Dependent Claim
25 words
The system of claim 35, wherein said policy manager further comprises a logger for recording and tracking authorization events that are received from the client.
Claim 43
Dependent Claim
20 words
The system of claim 35, wherein said global policy specifies access privileges of at least one user to securable components.
Claim 44
Dependent Claim
19 words
The system of claim 35, wherein the policy manager comprises a database management system for maintaining the global policy.
Claim 45
Dependent Claim
27 words
The system of claim 35, wherein the global policy is defined by a policy language to grant or deny access to securable components for a particular user.
Claim 46
Dependent Claim
23 words
The system of claim 35, wherein said policy manager includes a set of menu options to manage and distribute the customized local policy.
Claim 47
Dependent Claim
12 words
The system of claim 35, wherein the customized local policy is optimized.
Claim 48
Dependent Claim
30 words
The system of claim 35, wherein the policy manager further includes a policy manager application guard for managing access to the policy manager as specified by a local administrative policy.
Claim 49
Independent Claim
99 words
A method for maintaining security in a distributed computing environment, comprising the steps of: managing a policy using a policy manager by specifying access privileges of a user to securable components selected from the group consisting of at least one application, a function within an application, a procedure within an application, a data structure within an application, a database object referenced by an application, or a file system object referenced by an application; and distributing the policy to a client having an application guard, whereby the application guard manages access to the securable components as specified by the policy.
Claim 50
Independent Claim
99 words
A method for maintaining security in a distributed computing environment, comprising the steps of: managing a policy using a policy manager by specifying access privileges of a user to securable components selected from the group consisting of at least one application, a function within an application, a procedure within an application, a data structure within an application, a database object referenced by an application, or a file system object referenced by an application; and distributing the policy to a client having an application guard, whereby the application guard manages access to the securable components as specified by the policy.
Claim 51
Dependent Claim
23 words
The method of claim 45, further including the step of recording authorization events that occur through the application guard after distributing the policy.
Claim 52
Independent Claim
136 words
A method for maintaining security on a client in a distributed computing environment, comprising the steps of: constructing and issuing an authorization request for a user to access to securable components located on the client using an application guard, said securable components being selected from the group consisting of at least one application, a function within an application, a procedure within an application, a data structure within an application, a database object referenced by an application, or a file system object referenced by an application; evaluating the authorization request using the application guard to determine if the authorization request is valid or invalid; and allowing access to the user via the application guard if the evaluated authorization request was valid, and denying access to the user via the application guard if the authorization request was invalid.
Claim 53
Independent Claim
136 words
A method for maintaining security on a client in a distributed computing environment, comprising the steps of: constructing and issuing an authorization request for a user to access to securable components located on the client using an application guard, said securable components being selected from the group consisting of at least one application, a function within an application, a procedure within an application, a data structure within an application, a database object referenced by an application, or a file system object referenced by an application; evaluating the authorization request using the application guard to determine if the authorization request is valid or invalid; and allowing access to the user via the application guard if the evaluated authorization request was valid, and denying access to the user via the application guard if the authorization request was invalid.
Claim 54
Dependent Claim
23 words
The method of claim 47, after evaluating the authorization request, further including the step of recording the authorization request in an audit log.
Claim 55
Dependent Claim
121 words
A computer-readable medium comprising program instructions for maintaining security in a distributed computing environment by performing the steps of: managing a policy using a policy manager by specifying access privileges of a user to securable components selected from the group consisting of at least one application, a function within an application, a procedure within an application, a data structure within an application, a database object referenced by an application, or a file system object referenced by an application; distributing the policy using the policy manager to a client having an application guard, whereby the application guard manages access to the securable components as specified by the policy; and executing said policy manager with a processor to manage and distribute the policy.
Claim 56
Dependent Claim
121 words
A computer-readable medium comprising program instructions for maintaining security in a distributed computing environment by performing the steps of: managing a policy using a policy manager by specifying access privileges of a user to securable components selected from the group consisting of at least one application, a function within an application, a procedure within an application, a data structure within an application, a database object referenced by an application, or a file system object referenced by an application; distributing the policy using the policy manager to a client having an application guard, whereby the application guard manages access to the securable components as specified by the policy; and executing said policy manager with a processor to manage and distribute the policy.
Claim 57
Dependent Claim
155 words
A computer-readable medium comprising program instructions for maintaining security on a client in a distributed computing environment by performing the steps of: constructing and issuing an authorization request for a user to access to securable components located on the client using an application guard, said securable components being selected from the group consisting of at least one application, a function within an application, a procedure within an application, a data structure within an application, a database object referenced by an application, or a file system object referenced by an application; evaluating the authorization request using the application guard to determine if the authorization request is valid or invalid; allowing access to the user via the application guard if the evaluated authorization request was valid, and denying access to the user via the application guard if the authorization request was invalid; and executing said application guard with a processor to automatically maintain security on the client.
Claim 58
Dependent Claim
155 words
A computer-readable medium comprising program instructions for maintaining security on a client in a distributed computing environment by performing the steps of: constructing and issuing an authorization request for a user to access to securable components located on the client using an application guard, said securable components being selected from the group consisting of at least one application, a function within an application, a procedure within an application, a data structure within an application, a database object referenced by an application, or a file system object referenced by an application; evaluating the authorization request using the application guard to determine if the authorization request is valid or invalid; allowing access to the user via the application guard if the evaluated authorization request was valid, and denying access to the user via the application guard if the authorization request was invalid; and executing said application guard with a processor to automatically maintain security on the client.
Claim 59
Independent Claim
116 words
A system for maintaining security in a distributed computing environment, comprising: means for managing a policy using a policy manager by specifying access privileges of a user to securable components selected from the group consisting of at least one application, a function within an application, a procedure within an application, a data structure within an application, a database object referenced by an application, or a file system object referenced by an application; means for distributing the policy using the policy manager to a client having an application guard, whereby the application guard manages access to the securable components as specified by the policy; and means for executing the policy manager to manage and distribute the policy.
Claim 60
Independent Claim
116 words
A system for maintaining security in a distributed computing environment, comprising: means for managing a policy using a policy manager by specifying access privileges of a user to securable components selected from the group consisting of at least one application, a function within an application, a procedure within an application, a data structure within an application, a database object referenced by an application, or a file system object referenced by an application; means for distributing the policy using the policy manager to a client having an application guard, whereby the application guard manages access to the securable components as specified by the policy; and means for executing the policy manager to manage and distribute the policy.
Claim 61
Independent Claim
152 words
A system for maintaining security on a client in a distributed computing environment, comprising: means for constructing and issuing an authorization request for a user to access to securable components located on the client using an application guard, said securable components being selected from the group consisting of at least one application, a function within an application, a procedure within an application, a data structure within an application, a database object referenced by an application, or a file system object referenced by an application; means for evaluating the authorization request using the application guard to determine if the authorization request is valid or invalid; means for allowing access to the user via the application guard if the evaluated authorization request was valid, and denying access to the user via the application guard if the authorization request was invalid; and means for executing said application guard to automatically maintain security on the client.
Claim 62
Independent Claim
152 words
A system for maintaining security on a client in a distributed computing environment, comprising: means for constructing and issuing an authorization request for a user to access to securable components located on the client using an application guard, said securable components being selected from the group consisting of at least one application, a function within an application, a procedure within an application, a data structure within an application, a database object referenced by an application, or a file system object referenced by an application; means for evaluating the authorization request using the application guard to determine if the authorization request is valid or invalid; means for allowing access to the user via the application guard if the evaluated authorization request was valid, and denying access to the user via the application guard if the authorization request was invalid; and means for executing said application guard to automatically maintain security on the client.
References Cited (Backward Citations)
US5265221A
Cited
US5557747A
Cited
US5835726A
Cited
US6035399A
Cited
US5841869A
Cited
US5983350A
Cited
US5983270A
Cited
US5991877A
Cited
US5968176A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2003-12-05 | 2004-06-05 | 2004-12-05 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2007-12-05 | 2008-06-05 | 2008-12-05 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2011-12-05 | 2012-06-05 | 2012-12-05 | $7700.00 | Window Closed / Lapsed |