Accessing protected resources via multi-identity security environments
AssigneeInternational Business Machines Corporation
InventorsErnest Bender, Richard Guski, Deborah Mapes, Bruce Wells
Life of this patent
Estimating the term…
Abstract
A multi-identity security environment is created for use in controlling access to resources. The multi-identity security environment enables one process that is spawned by another process to access resources security accessible to the one process, as well as resources security accessible to the another process. The multi-identity security environment includes an identity of the one process and an identity of the another process.
Claims43
A method of managing identities of processes of a computing environment, said method comprising:
- initiating by one process in one address space creation of another process in another address space;
- and
- providing a multi-identity security environment for the another process, said multi-identity security environment including an identity of the another process and an identity of the one process.
A method of facilitating access to resources of a computing environment, said method comprising:
- having one process and another process, wherein a relationship exists between the one process and the another process;
- and
- providing a multi-security environment for a process of the one process and the another process, said multi-security environment including a security environment for said one process and a security environment for said another process, said multi-security environment usable in accessing a set of resources by the process, said set of resources comprising a union of one or more resources accessible via the security environment of said one process and one or more resources accessible via the security environment of said another process.
A system of managing identities of processes of a computing environment, said system comprising:
- means for initiating by one process in one address space creation of another process in another address space;
- and
- means for providing a multi-identity security environment for the another process, said multi-identity security environment including an identity of the another process and an identity of the one process.
A system of facilitating access to resources of a computing environment, said system comprising:
- one process and another process, wherein a relationship exists between the one process and the another process;
- and
- means for providing a multi-security environment for a process of the one process and the another process, said multi-security environment including a security environment for said one process and a security environment for said another process, said multi-security environment usable in accessing a set of resources by the process, said set of resources comprising a union of one or more resources accessible via the security environment of said one process and one or more resources accessible via the security environment of said another process.
A system of managing identities of processes of a computing environment, said system comprising:
- one process in one address space to initiate creation of another process in another address space;
- and
- a component of the computing environment to provide a multi-identity security environment for the another process, said multi-identity security environment including an identity of the another process and an identity of the one process.
A system of facilitating access to resources of a computing environment, said system comprising:
- one process and another process, wherein a relationship exists between the one process and the another process;
- and
- a multi-security environment for a process of the one process and the another process, said multi-security environment including a security environment for said one process and a security environment for said another process, said multi-security environment usable in accessing a set of resources by the process, said set of resources comprising a union of one or more resources accessible via the security environment of said one process and one or more resources accessible via the security environment of said another process.
An article of manufacture comprising:
- at least one computer usable medium having computer readable program code logic to manage identities of processes of a computing environment, the computer readable program code logic comprising:
- initiate logic to initiate by one process in one address space creation of another process in another address space;
- and
- provide logic to provide a multi-identity security environment for the another process, said multi-identity security environment including an identity of the another process and an identity of the one process.
An article of manufacture comprising:
- at least one computer usable medium having computer readable program code logic to facilitate access to resources of a computing environment, the computer readable program code logic comprising:
- logic to have one process and another process, wherein a relationship exists between the one process and the another process;
- and
- provide logic to provide a multi-security environment for a process of the one process and the another process, said multi-security environment including a security environment for said one process and a security environment for said another process, said multi-security environment usable in accessing a set of resources by the process, said set of resources comprising a union of one or more resources accessible via the security environment of said one process and one or more resources accessible via the security environment of said another process.
Dependencies are inferred from the claim text.