Patent · US Expired

System for determining the rights of object access for a server process by combining them with the rights of the client process

US5321841A · kind A · utility

381Cited by
20References
8Claims
0Family size

Assignee

Inventors

Key dates

Filing dateJan 29, 1993
Grant dateJun 14, 1994
Priority date
Expiry dateJan 29, 2013

Classification

  • Technology area (CPC G)Physics
  • CPC primaryG06F9/468
  • WIPO fieldComputer technology
  • WIPO sectorElectrical engineering

Abstract

In a multitasking, multiuser computer system, a server process temporarily impersonates the characteristics of a client process when the client process preforms a remote procedure call on the server process. Each process has an identifier list with a plurality of identifiers that characterize the process. The server process generates a new identifier list which is either the same as the client process's list, or is the union of the server's and the client's lists. Each object in the system can have an access control list which defines the identifiers that a process must have in order to access the object. The operation system has access checking software for enabling a selected process access to a specified object when the identifiers for the process match the list of identifiers in the access control list of the specified object. The server can therefore access all objects accessible to the client while the server is working for the client. The server can restore its original identifier list after completing the services that it performs for the client.

Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.