Loading patent…
OwnerChristophe Bidan, Mireille Pauliacinventors
Estimating the term…
The invention relates to access rules (R) of compliance of subjects (Su) with objects (Ob) with a predetermined security policy (PS) in a data processing system such as a chip card. Each access rule defines the right of a subject to carry out an action on an object The security policy defines the security rules (RS) for access of the subjects to the objects. For an operation relating to a given object (Ob), at least one access rule relating to the given object is compared with the security rules in order to accept the operation when the access rule is in compliance with all the security rules; if this is not the case, the operation is refused. An operation can be the loading of an object such as an application, a modification of the access rules, or deletion or addition of a subject (s) or a request for access to a given object by a subject or a group of subjects.
A method for verifying the compliance of access rules (Re) defining respectively rights authorising and/or prohibiting first elements (Su), such as users, to carry out/from carrying out actions on second elements (Ob), such as applications located in a portable electronic object (CA), with security rules (RS) limiting the rules for access of the first elements to the second elements, characterised in that it comprises, for each operation (ET3) relating to a given second element (Ob), such as in particular loading of the given second element (Ob) or an access rule modification relating to the given second object in the portable electronic object (CA), a comparison (ET81, ET82, ET83, ET9) of at least one rule for access (Su/GpROb) to the given second element with the security rules (RS) so as to accept (ET10) the operation when the said access rule (R) complies with all the security rules and to signal non-compliance of the operation when the said access rule does not comply with one of the security rules.
Dependencies are inferred from the claim text.