Management of Mandatory Access Control For Graphical User Interface Applications
AssigneeInternational Business Machines Corporation
InventorsSanehiro Furuichi, Atsumi Ikebe, Takuya Mishina, Masami Tada
Life of this patent
Estimating the term…
Abstract
Granular policy management is provided based upon an active status of a process and the display status of an associated visual display. A policy is constructed and applied to a process by a combination of individual control policy parameters associated with the status of a process or a graphical user interface. Each active policy is dynamically adjusted in response to a change in at least one policy condition.
Claims18
A method for dynamic resource access, comprising:
- configuring a computer system with a processor and memory in communication with a policy manager;
- said policy manager evaluating a new control policy for a process to be executed within said computer system to determine consistency of said new policy with an existing policy;
- detecting a workable access control policy for said process by monitoring activation and termination of processes from all running applications;
- registering said new control policy with said policy manager in response to said evaluation and said detection of said workable control policy determining that the control policy being registered is consistent with an existing and registered control policy;
- classifying at least one of said policies based upon a policy application condition;
- and
- adjusting each policy parameter in real-time in response to a change in at least one policy condition.
The method of claim l,further comprising applying said policy application condition to a transition of a graphical user interface related event.
A computer system comprising:
- a processor in communication with memory and a policy manager;
- said policy manager to evaluate a new control policy for a process for execution, said evaluation to include a determination of consistency of said new policy with an existing policy;
- a process manager in communication with said policy manager to monitor activation and termination of processes from all running application and to detect a workable access control policy for said process;
- said process manager to register said new control policy with said policy manager responsive to said evaluation and detection of said workable control policy and determination of consistency of said control policy being registered with an existing and registered control policy;
- said policy manager to classify at least one of said policies based upon a policy application condition;
- and
- said policy manager to adjust each policy parameter in real-time responsive to a change in at least one policy condition.
An article comprising:
- a computer readable medium having computer-readable instructions stored thereon executable by a processor, said instructions comprising:
- instructions to evaluate a new control policy for a process to be executed within a computer system to determine consistency of said new policy with an existing policy;
- instructions to detect a workable access control policy for said process by monitoring activation and termination of processes from all running applications;
- instructions to register said new control policy with said policy manager in response to said evaluation and said detection of said workable control policy determining that the control policy being registered is consistent with an existing and registered control policy;
- instructions to classify at least one of said policies based upon a policy application condition;
- and
- instructions to adjust each policy parameter in real-time in response to a change in at least one policy condition.
Dependencies are inferred from the claim text.