Access relationships in a computer system
AssigneeSSH Communications Security OYJ
InventorVesa Luukkala
Life of this patent
Estimating the term…
Abstract
The disclosure relates to methods and apparatuses for controlling access relationships between entities in a computerized system. A chain of access relationships from a first entity via at least one intermediate entity to a second entity is determined. At least one direct access relationship is then created between the first entity and the second entity based on information of the determined chain of access relationships.
Claims20
A method for controlling, by a network control apparatus of a computerised network system, trust relationships between entities capable of communicating with each other in the computerised network system, the method comprising:
- determining, by the network control apparatus, an existing chain of trust relationships from a first entity via at least one intermediate entity to a second entity, wherein the first entity, the second entity, and the at least one intermediate entity each provide a separate node in the determined existing chain of trust relationships,
- creating, by the network control apparatus and based on the determined existing chain of trust relationships from the first entity via the at least one intermediate entity to the second entity, at least one new secured direct trust relationship between the first entity and the second entity, wherein the created at least one new secured direct trust relationship between the first entity and the second entity provides a shorter chain of trust relationships via fewer intermediate entities than the determined existing chain of trust relationships from the first entity via the at least one intermediate entity to the second entity and wherein the created at least one new secured direct trust relationship is secured based on security credentials comprising at least one of a key or a certificate according to a security protocol, and
- causing, by the network control apparatus, storing information of the created at least one new secured direct trust relationship between the first entity and the second entity in a database of trust relationships.
A network apparatus for controlling trust relationships between entities communicating in a network, the network apparatus comprising at least one processor, and at least one memory including computer program code, wherein the at least one memory and the computer program code are configured, with the at least one processor, to cause the network apparatus to:
- determine an existing chain of trust relationships from a first entity via at least one intermediate entity to a second entity, wherein the first entity, the second entity, and the at least one intermediate entity each provide a separate node in the determined existing chain of trust relationships,
- create, based on the determined existing chain of trust relationships from the first entity via the at least one intermediate entity to the second entity, at least one new secured direct trust relationship between the first entity and the second entity, wherein the created at least one new secured direct trust relationship between the first entity and the second entity provides a shorter chain of trust relationships via fewer intermediate entities than the determined existing chain of trust relationships from the first entity via the at least one intermediate entity to the second entity and wherein the created at least one new secured direct trust relationship is secured based on security credentials comprising at least one of a key or a certificate according to a security protocol, and
- store in the at least one memory information of the created at least one new secured direct trust relationship.
One or more non-transitory computer readable media storing instructions that, when executed, cause a processor of a network apparatus to perform a trust relationship control method for controlling trust relationships between entities communicating in a computerized network, the method performed comprising:
- determining an existing chain of trust relationships from a first entity via at least one intermediate entity to a second entity, wherein the first entity, the second entity, and the at least one intermediate entity each provide a separate node in the determined existing chain of trust relationships,
- creating, based on the determined existing chain of trust relationships from the first entity via the at least one intermediate entity to the second entity, at least one new secured direct trust relationship between the first entity and the second entity, wherein the created at least one new secured direct trust relationship between the first entity and the second entity provides a shorter chain of trust relationships via fewer intermediate entities than the determined existing chain of trust relationships from the first entity via the at least one intermediate entity to the second entity and wherein the created at least one new secured direct trust relationship is secured based on security credentials comprising at least one of a key or a certificate according to a security protocol, and
- causing storing of information of the created at least one new secured direct trust relationship in a database of trust relationships.
Dependencies are inferred from the claim text.