Verification system and method for accessing resources in a computing environment
AssigneeInternational Business Machines Corporation
InventorAviad Zlotnick
Life of this patent
Estimating the term…
Abstract
A software package in accordance with one embodiment comprises a software application, and a declaration of operation associated with the software application. The declaration of operation is examined by a system module running on the computing system. The system module is configured to control access requests submitted by the software application after software application is installed on the computing system. The system module monitors a request for accessing a resource accessible via the computing system. The system module grants the software application access to the resource, in response to determining that the request for access complies with the declaration of operation.
Claims19
A method for controlling access to resources in a computing environment, the method comprising:
- processing a declaration of operation associated with a software application, in response to determining that the software application is being installed on a computing system,
- wherein the software application is included in a software package comprising logic code for the software application and the declaration of operation,
- wherein the declaration of operation provides one or more permissions for the software application to access one or more resources in the computing environment, such that an operating system running on the computing system utilizes the one more permissions information included in the declaration of operation for the software application to determine what type of access the software application may have to the resources in the computing environment,
- wherein the one or more permissions are modifiable by a user of the computing system at the time of installation or after the installation of the software application, such that the user is able to designate scope and type of access to said one or more resources,
- wherein the declaration of operation is processed by a system module executed over the computing system, the system module configured to control access requests submitted by the software application after the software application is installed on the computing system,
- wherein the system module monitors a first request submitted by the software application to access a first resource in the computing environment,
- wherein the system module grants the first request, in response to determining that the first request complies with the declaration of operation associated with the software application, thereby allowing the software application to access the first resource, and
- wherein the one or more permissions are set so that if different users use the same software application, each user is given access to different resources when using the software application.
A software package configured for installing a software application on a computing system, the software package stored on a computer readable storage medium with non-transient properties, the software package comprising:
- a software application wherein the software application is included in a software package comprising logic code for a software application and the declaration of operation, and
- a declaration of operation associated with the software application, wherein the declaration of operation is examined by a system module running on the computing system, the system module configured to control access requests submitted by the software application to access one or more resources after software application is installed on the computing system,
- wherein one or more access permissions are set based on the declaration of operation such that the system module running on the computing system utilizes the one more access permissions included in the declaration of operation for the software application to determine what type of access the software application may have to the resources in the computing system,
- wherein said one or more access permissions are modifiable by a user of the computing system at the time of installation or after the installation of the software application, such that the user is able to designate scope and type of access to said one or more resources,
- wherein the system module monitors a request for accessing a resource accessible via the computing system,
- wherein the system module grants the software application access to the resource, in response to determining that the request for access complies with the declaration of operation associated with the software application, and
- wherein the one or more permissions are set so that if different users use the same software application, each user is given access to different resources when using the software application.
A computer program product comprising logic code embedded in a non-transient computer readable storage medium having a computer readable program stored thereon, wherein the logic code is executed by a microcontroller to cause a computer to:
- monitor one or more requests submitted by a first software application to access one or more resources accessible via the computer wherein the first software application is included in a software package comprising logic code and a declaration of operation for the first software application;
- and
- grant the first software application's request to access the one or more resources, in response to determining that the request complies with a first declaration of operation associated with the first application software,
- wherein one or more access permissions are set based on the declaration of operation such that an operating system running on the computing system utilizes one more access permissions information included in the declaration of operation for the first software application to determine what type of access the software application may have to resources in a computing environment
- wherein one or more permissions are modifiable by a user of the computing system at the time of installation or after the installation of the software application, such that the user is able to designate scope and type of access to said one or more resources, and
- wherein the one or more permissions are set so that if different users use the same software application, each user is given access to different resources when using the software application.
Dependencies are inferred from the claim text.