US 7,424,680 B2Granted

Set top box object security system

AssigneeMicrosoft Corporation

InventorWiltse J. Carpenter

Life of this patent

Estimating the term…

Loading patent…

Abstract

Systems and methods for controlling the ability of scripts to access objects defined at the client. The client stores an access control data structure having multiple entries. Each entry is associated with one or more objects for which access is to be controlled. The entries include a source identifier field containing one or more URLs and a permission identifier field containing data defining a permission. When the client receives a script from a script source, such as a web site, the client begins execution of the script until the script requests access to an object. The client identifies a relevant entry of the access control data structure, which is an entry that is associated with the requested object and lists the URL of the script source in the source identifier field. The client applies the permission defined by the permission identifier of the relevant entry to the request, thereby granting or denying access to the script. Thus, the client permits selected remote entities to exercise control over objects and, in turn, over components of the client, while preventing unauthorized scripts from accessing the objects.

Claims10

Dependent claims

A computer program product for use in a client system that includes various client system components, and that is configured to receive one or more scripts from one or more script sources, the client system also including one or more objects that are configured to control properties and features of the client system components, the computer program product comprising one or more computer readable storage media storing computer-executable instructions for implementing a method of selectively granting or denying a script access to the one or more objects, wherein said method comprises:

storing at the client system an access control data structure having one or more entries, each entry being associated with an object for which access is to be controlled and including a source identifier representing one or more script sources and a permission identifier defining a permission;
receiving a script from a particular script source, wherein the script, if fully executed by the browser, would request access to a particular object;
identifying an entry of the access control data structure that is independent of the script and that is associated with the particular object and has a source identifier representing the particular script source;
and
applying the permission defined by the permission identifier included in the identified entry to the script such that access by the script to the particular object is based upon one or more permissions that are associated with the script source and the particular system object and that are independent of the script.

2 more elements

Dependencies are inferred from the claim text.

Facts

Application: 11/100,306Filed 6 Apr 2005 · continuation
Priority: 9 Apr 1998
Published: US 2005/0177753 A111 Aug 2005
Granted: 9 Sep 2008
Term ends: Not estimatedThe source records don’t support an estimate.

Classification2 codes

G06F 21/6227
To a system of files or objects, e.g. local or distributed file system or database: where protection concerns the structure of data, e.g. records,…
G06F
Computing and data processing

Family

Application60/081,236Us provisional application · filed 9 Apr 1998
Application60/112,771Us provisional application · filed 18 Dec 1998
Application09/287,666Parent of this continuation · filed 7 Apr 1999
Application10/772,991Parent of this continuation · filed 5 Feb 2004
US 2005/0177753 A1Pre-grant publication · published 11 Aug 2005
US 6,986,062 B2Parent of this continuation
US 2004/0158722 A1Published application
US 7,424,680 B2This patent

From the US filing history. Foreign family members aren’t listed.