US 6,295,605 B1 · Method and apparatus for multi-level security evaluation

Abstract

The security evaluation method of the invention utilizes multiple levels of security evaluation before certain user's can gain access to system resources. Upon receiving a user access request, the method acquires qualification data regarding the access request and determines a security level that is applicable to a selected system resource which is indicated by the user access request. Thereafter, the method performs at least one of a plurality of security tests to determine if the qualification data matches the security level applicable to the selected system resource. At least some of the plurality of security tests are arranged to be performed in an order of speed of execution, with a fastest executable security evaluation test being performed first and a slowest executable security test being performed last. A more slowly executable security test is performed with respect to the user access request only if all faster executable security tests return “don't know”, or equivalent, responses. The method enables the speed of execution ordering to be overridden if a further system constraint will enable another ordering to maximize system performance.

Claims30

Dependent claims

A method for security evaluation of a request for access to a system resource, wherein multiple levels of security evaluation are applied before certain users can gain access to at least portions of said system resource, said method comprising the steps of:

receiving a user request for access to a selected system resource and acquiring qualification data regarding said request;
determining a security level applicable to said selected system resource;
performing at least one of a plurality of security tests to determine if said qualification data matches said security level applicable to said selected system resource, at least some of said plurality of security tests arranged to be performed in an order which maximizes system performance in a manner to arrive at an earliest acceptance or an earliest rejection of an access request.

A memory media for controlling a computer to perform a security evaluation of a request for access to a system resource, wherein multiple levels of security evaluation are applied by said computer before certain users can gain access to at least portions of said system resource, said memory media comprising:

a) means for controlling said computer to receive a user request for access to a selected system resource and to acquire qualification data regarding said request;
b) means for controlling said computer to determine a security level applicable to said selected system resource;
c) means for controlling said computer to perform at least one of a plurality of security tests to determine if said qualification data matches said security level applicable to said selected system resource, at least some of said plurality of security tests arranged to be performed in an order which maximizes system performance in a manner to arrive at an earliest acceptance or an earliest rejection of an access request.

Dependencies are inferred from the claim text.

Method and apparatus for multi-level security evaluation

Life of this patent

Method and apparatus for multi-level security evaluation

Life of this patent

Abstract

Claims30