US 8,752,128 B2Granted

Rule-based application access management

AssigneeNumecent Holdings, Inc.

InventorsArthur Shingen Hitomi, Robert Tran, Peter Joseph Kammer, Doug Pfiffner, Huy Nguyen

Life of this patent

Estimating the term…

Loading patent…

Abstract

A container that manages access to protected resources using rules to intelligently manage them includes an environment having a set of software and configurations that are to be managed. A rule engine, which executes the rules, may be called reactively when software accesses protected resources. The engine uses a combination of embedded and configurable rules. It may be desirable to assign and manage rules per process, per resource (e.g. file, registry, etc.), and per user. Access rules may be altitude-specific access rules.

Claims23

Dependent claims

A method comprising:

displaying resources;
providing altitude stored in a table for a set of the resources;
providing access control rules stored in the table for the set of resources at the altitude;
providing a file object and a path in a table entry of the table associated with a resource of the set of resources, wherein the table entry further includes the altitude and an access control rule of the access control rules;
receiving at runtime a request for the resource from an application having a process ID;
determining whether the process ID is associated with the file object and the path;
if it is determined that the process ID is associated with the file object and the path:
populating a runtime table with the altitude, the access control rule, and the process ID;
if it is determined that the process ID is not associated with the file object and the path:
setting the access control rule to a Pass Through access control rule;
populating the runtime table with the altitude, the Pass Through access control rule, and the process ID;
providing security settings for the set of resources at the altitude.

9 more elements

A system comprising:

at least one processor;
memory storing instructions configured to instruct the at least one processor to perform:
displaying resources;
providing altitude stored in a table for a set of the resources;
providing access control rules stored in the table for the set of resources at the altitude;
providing a file object and a path in a table entry of the table associated with a resource of the set of resources, wherein the table entry further includes the altitude and an access control rule of the access control rules;
receiving at runtime a request for the resource from an application having a process ID;
determining whether the process ID is associated with the file object and the path;
if it is determined that the process ID is associated with the file object and the path:
populating a runtime table with the altitude, the access control rule, and the process ID;
if it is determined that the process ID is not associated with the file object and the path:
setting the access control rule to a Pass Through access control rule;
populating the runtime table with the altitude, the Pass Through access control rule, and the process ID;
providing security settings for the set of resources at the altitude.

11 more elements

Dependencies are inferred from the claim text.

Facts

Application: 13/594,546Filed 24 Aug 2012 · division
Priority: 23 Oct 2006
Published: US 2012/0324530 A120 Dec 2012
Granted: 10 Jun 2014
Term ends: Not estimatedThe source records don’t support an estimate.

Classification10 codes

H04L 63/10
Network architectures or network communication protocols for network security: for controlling access to devices or network resources
G06F 9/468
Multiprogramming arrangements: specific access rights for resources, e.g. using capability register
G06F 21/6218
Protecting access to data via a platform, e.g. using keys or access control rules: to a system of files or objects, e.g. local or distributed file…
H04L 41/0813
Configuration setting: characterised by the conditions triggering a change of settings

Family

Application60/853,941Us provisional application · filed 23 Oct 2006
Application11/977,187Parent of this division · filed 23 Oct 2007
US 2012/0324530 A1Pre-grant publication · published 20 Dec 2012
US 8,261,345 B2Parent of this division
US 2008/0109876 A1Published application
US 8,752,128 B2This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key