Resource protection from unauthorized access using state transition histories

A resource protection program for protecting resources to be processed on a computer comprising a memory with the program stored therein, the program causing the computer to implement:

• a preparatory function as a function for preparing a plurality of defined state transition histories and a plurality of defined actions, both of which are predefined and associated with each other, preparing a plurality of weighting values associated with the plurality of defined state transition histories, and associating a plurality of final state values with the plurality of defined actions, wherein each of the defined state transition histories defines a state transition history as a history of state transitions in the computer upon execution of predetermined access to a predetermined resource, each of the defined actions defines a process for controlling predetermined access to a predetermined resource so that the defined action can be executed upon transition from a defined state defining a state of the computer to a next defined state, each of the final state values is a value of a final state function using a weighting value as a variable, and a real state transition history is a history of actual state transitions in the computer upon execution of real access as actual access to a real resource as an actual resource;
• a state transition function for making a transition of an actual state of the computer according to a defined state transition history;
• a final state value calculating function as a function for calculating the final state function using a determined weighting value as a variable to obtain a final state value, wherein the determined weighting value is a weighting value associated with a defined state transition history matching the real state transition history;
• and
• an action execution function for selecting, upon execution of the real access to the real resource, a defined action associated with the final state value from among one or the plurality of defined actions, each defined to be executable when the transition is made from a defined state matching a real state of the computer to a next defined state, to execute the defined action selected.

A resource protection program for protecting resources to be processed on a computer comprising a memory with the program stored therein, the program causing the computer to implement:

• a preparatory function as a function for preparing a plurality of defined state transition histories and a plurality of defined actions, both of which are predefined and associated with each other, preparing a plurality of individual weighting values associated with a plurality of defined state transitions in the computer, and associating a plurality of final state values with the plurality of defined actions, wherein each of the defined state transition histories defines a state transition history as a history of state transitions in the computer upon execution of predetermined access to a predetermined resource, each of the defined actions defines a process for controlling predetermined access to a predetermined resource so that the defined action can be executed upon transition from a defined state defining a state of the computer to a next defined state, each of the final state values is a value of a final state function using, as variables, a plurality of individual weighting values associated with a plurality of defined state transitions matching a plurality of state transitions leading up to a predetermined state, and a real state transition history is a history of actual state transitions in the computer upon execution of real access as actual access to a real resource as an actual resource;
• a state transition function for making a transition of an actual state of the computer according to a defined state transition history;
• a final state value calculating function as a function for calculating the final state function using a plurality of determined individual weighting values as variables to obtain a final state value, wherein the plurality of determined individual weighting values are a plurality of individual weighting values associated with a plurality of defined state transitions matching a plurality of actual state transitions leading up to a real state of the computer upon execution of the real access to the real resource;
• and
• an action execution function for selecting, upon execution of the real access to the real resource, a defined action associated with the final state value from among one or the plurality of defined actions, each defined to be executable when the transition is made from a defined state matching the real state of the computer to a next defined state, to execute the defined action selected.

An apparatus for protecting resources to be processed on a computer, the apparatus comprising:

• a central processing unit (CPU) coupled to a memory that includes instructions that, when executed by the CPU, causes the apparatus to perform steps of:
• preparing a plurality of defined state transition histories and a plurality of defined actions, both of which are predefined and associated with each other, wherein each of the defined state transition histories defines a state transition history as a history of state transitions in the computer upon execution of predetermined access to a predetermined resource, each of the defined actions defines a process for controlling predetermined access to a predetermined resource so that the defined action can be executed upon transition from a defined state defining a state of the computer to a next defined state, and a real state transition history is a history of actual state transitions in the computer upon execution of real access as actual access to a real resource as an actual resource;
• making a transition of an actual state of the computer according to a defined state transition history;
• and
• selecting, upon execution of the real access to the real resource, a defined action associated with a defined state transition history when there is the defined state transition history matching the real state transition history from among one or the plurality of defined actions, each defined to be executable when the transition is made from a defined state matching a real state of the computer to a next defined state, to execute the defined action selected.

An apparatus for protecting resources to be processed on a computer, the apparatus comprising:

• a central processing unit (CPU) coupled to a memory that includes instructions that, when executed by the CPU, causes the apparatus to perform steps of:
• preparing a plurality of defined state transition histories and a plurality of defined actions, both of which are predefined and associated with each other, preparing a plurality of weighting values associated with the plurality of defined state transition histories, and associating a plurality of final state values with the plurality of defined actions, wherein each of the defined state transition histories defines a state transition history as a history of state transitions in the computer upon execution of predetermined access to a predetermined resource, each of the defined actions defines a process for controlling predetermined access to a predetermined resource so that the defined action can be executed upon transition from a defined state defining a state of the computer to a next defined state, each of the final state values is a value of a final state function using a weighting value as a variable, and a real state transition history is a history of actual state transitions in the computer upon execution of real access as actual access to a real resource as an actual resource;
• making a transition of an actual state of the computer according to a defined state transition history;
• calculating the final state function using a determined weighting value as a variable to obtain a final state value, wherein the determined weighting value is a weighting value associated with a defined state transition history matching the real state transition history;
• and
• selecting, upon execution of the real access to the real resource, a defined action associated with the final state value from among one or the plurality of defined actions, each defined to be executable when the transition is made from a defined state matching a real state of the computer to a next defined state, to execute the defined action selected.

An apparatus for protecting resources to be processed on a computer, the apparatus comprising:

• a central processing unit (CPU) coupled to a memory that includes instructions that, when executed by the CPU, causes the apparatus to perform steps of:
• preparing a plurality of defined state transition histories and a plurality of defined actions, both of which are predefined and associated with each other, preparing a plurality of individual weighting values associated with a plurality of defined state transitions in the computer, and associating a plurality of final state values with the plurality of defined actions, wherein each of the defined state transition histories defines a state transition history as a history of state transitions in the computer upon execution of predetermined access to a predetermined resource, each of the defined actions defines a process for controlling predetermined access to a predetermined resource so that the defined action can be executed upon transition from a defined state defining a state of the computer to a next defined state, each of the final state values is a value of a final state function using, as variables, a plurality of individual weighting values associated with a plurality of defined state transitions matching a plurality of state transitions leading up to a predetermined state, and a real state transition history is a history of actual state transitions in the computer upon execution of real access as actual access to a real resource as an actual resource;
• making a transition of an actual state of the computer according to a defined state transition history;
• calculating the final state function using a plurality of determined individual weighting values as variables to obtain a final state value, wherein the plurality of determined individual weighting values are a plurality of individual weighting values associated with a plurality of defined state transitions matching a plurality of actual state transitions leading up to a real state of the computer upon execution of the real access to the real resource;
• and
• selecting, upon execution of the real access to the real resource, a defined action associated with the final state value from among one or the plurality of defined actions, each defined to be executable when the transition is made from a defined state matching the real state of the computer to a next defined state, to execute the defined action selected.

A resource protection method for protecting resources to be processed on a computer, the method comprising steps executed by the computer of:

• a preparation step as a step of preparing a plurality of defined state transition histories and a plurality of defined actions, both of which are predefined and associated with each other, wherein each of the defined state transition histories defines a state transition history as a history of state transitions in the computer upon execution of predetermined access to a predetermined resource, each of the defined actions defines a process for controlling predetermined access to a predetermined resource so that the defined action can be executed upon transition from a defined state defining a state of the computer to a next defined state, and a real state transition history is a history of actual state transitions in the computer upon execution of real access as actual access to a real resource as an actual resource;
• a state transition step of making a transition of an actual state of the computer according to a defined state transition history;
• and
• an action execution step of selecting, upon execution of the real access to the real resource, a defined action associated with a defined state transition history when there is the defined state transition history matching the real state transition history from among one or the plurality of defined actions, each defined to be executable when the transition is made from a defined state matching a real state of the computer to a next defined state, to execute the defined action selected.

A resource protection method for protecting resources to be processed on a computer, the method comprising steps executed by the computer of:

• a preparation step as a step of preparing a plurality of defined state transition histories and a plurality of defined actions, both of which are predefined and associated with each other, preparing a plurality of weighting values associated with the plurality of defined state transition histories, and associating a plurality of final state values with the plurality of defined actions, wherein each of the defined state transition histories defines a state transition history as a history of state transitions in the computer upon execution of predetermined access to a predetermined resource, each of the defined actions defines a process for controlling predetermined access to a predetermined resource so that the defined action can be executed upon transition from a defined state defining a state of the computer to a next defined state, each of the final state values is a value of a final state function using a weighting value as a variable, and a real state transition history is a history of actual state transitions in the computer upon execution of real access as actual access to a real resource as an actual resource;
• a state transition step of making a transition of an actual state of the computer according to a defined state transition history;
• a final state value calculating step as a step of calculating the final state function using a determined weighting value as a variable to obtain a final state value, wherein the determined weighting value is a weighting value associated with a defined state transition history matching the real state transition history;
• and
• an action execution step of selecting, upon execution of the real access to the real resource, a defined action associated with the final state value from among one or the plurality of defined actions, each defined to be executable when the transition is made from a defined state matching a real state of the computer to a next defined state, to execute the defined action selected.

A resource protection method for protecting resources to be processed on a computer, the method comprising steps executed by the computer of:

• a preparation step as a step of preparing a plurality of defined state transition histories and a plurality of defined actions, both of which are predefined and associated with each other, preparing a plurality of individual weighting values associated with a plurality of defined state transitions in the computer, and associating a plurality of final state values with the plurality of defined actions, wherein each of the defined state transition histories defines a state transition history as a history of state transitions in the computer upon execution of predetermined access to a predetermined resource, each of the defined actions defines a process for controlling predetermined access to a predetermined resource so that the defined action can be executed upon transition from a defined state defining a state of the computer to a next defined state, each of the final state values is a value of a final state function using, as variables, a plurality of individual weighting values associated with a plurality of defined state transitions matching a plurality of state transitions leading up to a predetermined state, and a real state transition history is a history of actual state transitions in the computer upon execution of real access as actual access to a real resource as an actual resource;
• a state transition step of making a transition of an actual state of the computer according to a defined state transition history;
• a final state value calculating step as a step of calculating the final state function using a plurality of determined individual weighting values as variables to obtain a final state value, wherein the plurality of determined individual weighting values are a plurality of individual weighting values associated with a plurality of defined state transitions matching a plurality of actual state transitions leading up to a real state of the computer upon execution of the real access to the real resource;
• and
• an action execution step of selecting, upon execution of the real access to the real resource, a defined action associated with the final state value from among one or the plurality of defined actions, each defined to be executable when the transition is made from a defined state matching the real state of the computer to a next defined state, to execute the defined action selected.