Trusted services broker for web page fine-grained security labeling
AssigneeLockheed Martin Corporation
InventorsGary L. Luckenbaugh, Forrest E. Stoakes
Life of this patent
Estimating the term…
Loading patent…
AssigneeLockheed Martin Corporation
InventorsGary L. Luckenbaugh, Forrest E. Stoakes
Estimating the term…
Arbitrarily fine-grained limitation of access to information stored in a resource of a data processor network is provided in a manner compatible with existing network browsers by mapping user identity and credentials with randomly assigned security cookie information which thus serves as a surrogate credential accompanying each user request during a session. Labels are imbedded within HTML files/text which may embody any desired security policy, including mandatory access control (MAC) arrangements which are not available through native browser functions. Data is retrieved in response to a user request which includes a security cookie from a location in the resource which is not directly accessible through use of a URL; the location being stored in a configuration file which is hidden from users. The retrieved data is then filtered in accordance with labels provided for each page and/or embedded in the text and used to build a response which may include hypertext links or other user interfaces for transmission to the user. Provision is made for viewing or changing of labels, credentials and passwords.
A method of limiting access to information stored in HTML files on a fine-grained basis and independent of HTML contents, accessible by a web server through a CGI script, according to security label constructs imbedded within web-server stored HTML, said information comprising a definition of HTML label structures recognizable by said CGI script, said method comprising steps of
Dependencies are inferred from the claim text.