Uniform modular framework for a host computer system

A system which provides a modular uniform security applications framework for a host computer system and a compliant security token in processing communications with the host computer system comprising:

• said compliant security token including a set of retrievable token security policies and one or more token security applications;
• said host computer system including a token access control application, a retrievable set of host security policies and at least one security application agent functionally associated with said token access control application;
• said token access control application including a section for;
• retrieving at least a portion of said host security policies from said host computer system,
• retrieving at least a portion of said token security policies from said compliant security token,
• generating a composite set of security policies from said host security policies and said token security policies, and
• transferring at least a portion of said composite set of security policies to said at least one of security application agent.

A system which provides a modular uniform security applications framework for a host computer system and a compliant security token in processing communications with the host computer system comprising:

• said compliant security token including a set of retrievable token security policies and one or more token security applications;
• said host computer system including a requesting application, a token access control application, a retrievable set of host security policies and at least one security application agent functionally associated with said token access control application;
• said token access control application including a section for;
• retrieving at least a portion of said host security policies from said host computer system,
• retrieving at least a portion of said token security policies from said compliant security token,
• generating a composite set of security policies from said host security policies and said token security policies, and
• returning at least a portion of said composite set of security policies to said requesting application;
• said requesting application including a section for;
• generating a request to perform a security function using said compliant security token,
• ensuring enforcement of said at least a portion of said composite set of security policies, and
• causing said at least one security application agent to execute in response to said request;
• and
• said at least one security application agent including a section for performing a security function with said one or more token security applications in accordance with said at least a portion of said composite set of security requirements.

A system which provides a modular uniform security applications framework for a host computer system and a compliant security token in processing communications with the host computer system comprising:

• said compliant security token including a set of retrievable token security policies and one or more token security applications;
• said host computer system including a token access control application, a retrievable set of host security policies and at least one security application agent functionally associated with said token access control application;
• said token access control application including a section for;
• retrieving at least a portion of said host security policies from said host computer system,
• retrieving at least a portion of said token security policies from said compliant security token,
• generating a composite set of security policies from said host security policies and said token security policies,
• ensuring enforcement of said composite set of security policies on a request to perform a security function using said compliant security token, and
• said at least one security application agent, including a section for performing said security function with said one or more token security applications in accordance with said composite set of security policies.

A method for using a modular uniform security applications framework for a host computer system and a compliant security token comprising the steps of:

• a. receiving a token security function request from a requesting application,
• b. retrieving a set of token security policies,
• c. retrieving a set of host security policies,
• d. combining said token security policies and said host security policies into a composite security policy,
• e. ensuring enforcement of said composite security policy on said security function request,
• f. receiving a credential if required by said composite security policy,
• g. sending said credential to an appropriate security application agent if required by said composite security policy,
• h. sending said credential to an appropriate token security application if required by said composite security policy, and
• i. performing a security function in accordance with said composite security policy.

A method for using a modular uniform security applications framework for a host computer system and a compliant security token comprising the steps of:

• a. receiving a token security function request from a requesting application,
• b. retrieving a set of token security policies,
• c. retrieving a set of host security policies,
• d. combining said token security policies and said host security policies into a composite security policy,
• e. sending at least a portion of said composite security policy to a appropriate security application agent,
• f. ensuring enforcement of at least a portion of said composite security policy on said security function request,
• g. receiving a credential if required by said composite security policy,
• h. sending said credential to an appropriate token security application if required by said composite security policy, and
• i. performing a security function in accordance with said composite security policy.

A method for providing a modular uniform security applications framework for a host computer system and a compliant security token comprising the steps of:

• a. receiving a token security function request from a requesting application,
• b. retrieving a set of token security policies,
• c. retrieving a set of host security policies,
• d. combining said token security policies and said host security policies into a composite security policy,
• e. sending at least a portion of said composite security policy to said requesting application,
• f. ensuring enforcement of at least a portion of said composite security policy by said requesting application,
• g. receiving a credential if required by said composite security policy,
• h. sending said credential to an appropriate security application agent if required by said composite security policy,
• i. sending said credential to an appropriate token security application if required by said composite security policy, and
• j. performing a security function in accordance with said composite security policy.

A computer program product embodied in a tangible form readable by a processor having executable instructions stored thereon for causing a computer to provide a modular uniform security applications framework for a host computer system and a compliant security token, said executable instructions comprising a computer readable program code section for causing said computer to;

• a. receive a token security function request from a requesting application,
• b. retrieve a set of token security policies,
• c. retrieve a set of host security policies,
• d. combine said token security policies and said host security policies into a composite security policy,
• e. enforce said composite security policy on said security function request, receive a credential if required by said composite security policy,
• f. send said credential to an appropriate security application agent if required by said composite security policy,
• g. send said credential to an appropriate token security application if required by said composite security policy, and
• h. perform a security function in accordance with said composite security policy.

A computer program product embodied in a tangible form readable by a processor having executable instructions stored thereon for causing a computer to provide a modular uniform security applications framework for a host computer system and a compliant security token, said executable instructions comprising a computer readable program code section for causing said computer to;

• a. receive a security function request from a requesting application,
• b. retrieve a set of token security policies,
• c. retrieve a set of host security policies,
• d. combine said token security policies and said host security policies into a composite security policy,
• e. send at least a portion of said composite security policy to an appropriate security application agent,
• f. enforce at least a portion of said composite security policy on said security function request,
• g. receive a credential if required by said composite security policy,
• h. send said credential to an appropriate token security application if required by said composite security policy, and
• i. perform a security function in accordance with said composite security policy.

A computer program product embodied in a tangible form readable by a processor having executable instructions stored thereon for causing a computer to provide a modular uniform security applications framework for a host computer system and a compliant security token, said executable instructions comprising a computer readable program code section for causing said computer to;

• a. receive a security function request from a requesting application,
• b. retrieve a set of token security policies,
• c. retrieve a set of host security policies,
• d. combine said token security policies and said host security policies into a composite security policy,
• e. send at least a portion of said composite security policy to requesting application,
• f. enforce at least a portion of said composite security policy by said requesting
• application,
• g. receive a credential if required by said composite security policy,
• h. send said credential to an appropriate security application agent if required by said composite security policy,
• i. send said credential to an appropriate token security application if required by said composite security policy, and
• j. perform a security function in accordance with said composite security policy.

A system which provides for retrieval of compatibility information associated with one or more counterpart security application agents from a functionally connected security token by at least one security application installed on a host computer system comprising:

• said functionally connected security token including said retrievable compatibility information and one or more token security applications installed in said functionally connected security token, wherein said retrievable capability information relates to compatibility between said one or more counterpart security application agents and said one or more token security applications;
• said host computer system including said one or more counterpart security application agents and said at least one security application, wherein said at least one security application includes a section for;
• retrieving said compatibility information related to said one or more counterpart security application agents;
• verifying that at least one compatible counterpart security application agent is operatively installed and if not, retrieving and operatively installing at least one compatible counterpart security application agent.

A method which provides for retrieval of compatibility information related to one or more counterpart security application agents from a functionally connected security token by at least one security application installed on a host computer system comprising the steps of:

• a. retrieving said compatibility information related to said one or more counterpart security application agents from said functionally connected security token,
• b. verifying that at least one compatible counterpart security application agent is operatively installed on a host computer system, and if not,
• c. retrieving said at least one compatible counterpart security application agent and
• d. operatively installing said at least one compatible counterpart security application agent on said host computer system.

A computer program product embodied in a tangible form readable by a processor having executable instructions stored thereon for causing a computer to provide for retrieval of compatibility information related to one or more counterpart security application agents from a functionally connected security token by at least one security application installed on a host computer system, said executable instructions comprising a computer readable program code section for causing said computer to;

• a. retrieve said compatibility information related to said one or more counterpart security application agents from said functionally connected security token,
• b. verify that at least one compatible counterpart security application agent is operatively installed on a host computer system, and if not,
• c. retrieve said at least one compatible counterpart security application agent and
• d. operatively install said at least one compatible counterpart security application agent on said host computer system.