5,903,882 A * 6,732,331 B1 * * cited by examiner. 11 m E WEB SERVICES FILE SERVER SYSTEM m CUSTOMER CUSTOMER CUSTOMER

Transcription

1 US B2 (12) United States Patent Wookey (10) Patent N0.: (45) Date of Patent: US 7,428,756 B2 Sep. 23, 2008 (54) (75) (73) (21) (22) (65) (60) (51) (52) (58) ACCESS CONTROL OVER DYNAMIC INTELLECTUAL CAPITAL CONTENT Inventor: Michael J. Wookey, Los Gatos, CA (Us) Assignee: Sun Microsystems, Inc., Palo Alto, CA (Us) Notice: Subject to any disclaimer, the term of this patent is extended or adjusted under 35 U.S.C. 154(b) by 1016 days. Appl. No.: 10/691,283 Filed: Oct. 22, 2003 Prior Publication Data US 2004/ A1 Nov. 18, 2004 Related US. Application Data Provisional application No. 60/469,767,?led on May 12, Int. Cl. H04L 9/32 ( ) US. Cl /26; 726/27 Field of Classi?cation Search /26E30, 726/1E2; 713/161,168 See application?le for complete search history. (56) References Cited 5,903,882 A * 6,732,331 B1 * * cited by examiner U.S. PATENT DOCUMENTS 5/1999 Asay et a /44 5/2004 Alexander /513 Primary ExamineriHosuk Song (74) Attorney, Agent, or FirmiSonnenschein Nath & Rosenthal LLP (57) ABSTRACT Methods, systems, and articles of manufacture consistent With the present invention provide for access control over dynamic intellectual capital content. A subscriber subscribes to a datatype, the datatype having a predetermined runtime property that restricts use of the datatype. The datatype is associated With a data referenced in the datatype and main tained separate from the datatype. The datatype is received responsive to the subscription. A determination is made Whether the runtime properties are valid. If the runtime prop erties are valid, a determination is made Whether a user of the subscriber has permission to access the data referenced in the datatype. 1f the user has permission to access the data, the user is provided access to the data. 10 Claims, 26 Drawing Sheets 1%O0 11 m E WEB SERVICES FILE SERVER SYSTEM SERVER 12% m /112 LEGACY CUSTOMER CUSTOMER CUSTOMER LEGEND LEGACY DATA STORAGE DEVICE LEGACY STORAGE CONTROLLER 14o - WEB BROWSER FILE MANAGER FILE SERVER STORAGE REGISTRATION ADMIN. WEBSITE

2 US. Patent Sep. 23, 2008 Sheet 1 0f 26 US 7,428,756 B2 FIGURE 1 gm 11_ "_O Q WEB SERVICES FILE SERVER SYSTEM SERVER 1i 12 13_4 /112 LEGACY STORAGE 11_6 E Q 152 CUSTOMER CUSTOMER CUSTOMER LEGEND LEGACY DATA STORAGE DEVICE LEGACY STORAGE CONTROLLER WEB BROWSER FILE MANAGER FILE SERVER STORAGE REGISTRATION ADMIN. WEBSITE

3 US. Patent Sep. 23, 2008 Sheet 2 0f 26 US 7,428,756 B2 FIG U RE 2 DATA PROCESSING SYSTEM 202 2% CPU I/O UNIT )1 0 MEMORY E E a a E E?1_0 206 DISPLAY SECONDARY STORAGE E E L E 222 E _28 E E E 2206 E E LEGEND REGISTRATION BLOCK VIRTUAL DATABASE BUS MANAGER 24s - LISTS 22s - STORAGE CONTROLLER 24a - PROPERTIES RDBMS LEGACY STORAGE CONTROLLER PROPERTIES DATABASE CORE STORAGE CONTROLLER MESSAGE BROKER CLUSTER TEMP- STORAGE CONTROLLER MESSAGE QUEUE REPOSITORY COMMON SERVICES BLOCK CLIENT MODULE TRANSFORMER BLOCK LOCAL FILE SYSTEM PRESENTER BLOCK MESSAGE QUEUE RDBMS EXTERNAL DATA INPUT MGR DATATYPE MAPPING EDITOR REGISTRY

4 US. Patent Sep. 23, 2008 Sheet 3 0f 26 US 7,428,756 B2 3; REGISTRY ADMINISTRATION WEBSITE 2:2 REGISTRY N2 306, 30s 31_4 REGISTERED BAD CLIENT BE/$ CLIENTS AND ACCESS USERS LOGS _2 REGISTERED DATATYPE KEYS DALTQCTBEPE

5

6 US. Patent Sep. 23, 2008 Sheet 5 0f 26 US 7,428,756 B2 FIGURE 5 I START I AUTHENTICATE USER 502 RECEIVE INPUT FOR DATATYPE KEY ADMINISTRATION I REGISTER NEW? MODIFY EXISTING? YE S ' 506 YES RECEIVE NEW L/ RECEIVE J DATATYPE KEY MODIFIED INFORMATION INFORMATION ' I VALIDATE DATATYPE KEY 512 J STORE DATATYPE KEY IN REGISTRY ' 514 J (ENDI

7 US. Patent Sep. 23, 2008 Sheet 6 0f 26 US 7,428,756 B2 I START I FIGURE 6 I 602 AUTHENTICATE J USER D i RECEIVE INPUT 604 FOR DATATYPE _/ ADMINISTRATION MODIFY EXISTING? I E 608 EC RECEV NEW./ R EIVE / DATATYPE MODIFIED DREZEEE INFORMATION INFORMATION ' 614 VALIDATE / DATATYPE I 616 STORE./ DATATYPE IN REGISTRY END

8 US. Patent Sep. 23, 2008 Sheet 7 0f 26 US 7,428,756 B2 FIGURE 7 I START I 702 AUTHENTICATE L/ USER E RECEIVE INPUT 704 FOR CLIENT F/ ADMINISTRATION l MODIFY EXISTING? YES, 708 YES, 714 YESL 722 RECEIvE NEW L/ RECEIvE. / INFORMATION CLIENT INFORMATION MODIFIED I GENERATE / PASSWORD " 716 validate / CLIENT I< 4 71a store / CLIENT IN REGISTRY

9 US. Patent Sep. 23, 2008 Sheet 8 0f 26 US 7,428,756 B2 FIGURE 8 22 Z52 BUS MANAGER MESSAGE OUEUE MESSAGE MESSAGE REGISTRY BROKER BROKER MESSAGE BROKER CLUSTER PUBLiSH AND SUBSCRIBE SYSTEM CLlENTS g2_4 CLIENT MODULE CLIENT MODULE REGssTRATloN MANAGEMENT TRANSFORMER TRANSFORMER ACCESS 2355 Z34_5

10 US. Patent Sep. 23, 2008 Sheet 9 0f 26 US 7,428,756 B2 FIGURE 9 INTELLECTUAL CAPITAL APPLICATIONS TRANSFORMERS PRESENTERS CLIENT MODULE CLIENT MODULE USAGE TRACKING EXTERNAL AND REPORTING MESSAGE BUS DATA INPUT STORAGE RELATIONSHIPS BETWEEN INTELLECTUAL CAPITAL APPLICATIONS AND OTHER FUNCTIONAL COMPONENTS

11 US. Patent Sep. 23, 2008 Sheet 10 0f 26 US 7,428,756 B2 FIGURE 10 2% & 2% TRANSFORMERS PRESENTERS EXTERNAL DATA INPUT MANAGERS Z? CLIENT MODULE 1002 CLIENT MODULE API CLIENT CLIENT MODULE SUBSCRIBE INITIAUZATION CONNECTION MANAGEMENT TO DATA REFERNCE CLosE DATA AND IC PUBLISH DATA CONNECTION QUERY REFERENCE

12 US. Patent Sep. 23, 2008 Sheet 11 0f 26 US 7,428,756 B2 FIGURE 11 1 START ) 1102 VALIDATE CLIENT T L RECEIVE CDI 1104 _/ 1 L AUTHENTICATE 1106 AND CONNECT T0 _/ MESSAGE BUS LEGACY L RETRI EVE DATABASE _/ CONNECTION INFORMATION I 1110 STORAGE CONTROLLER? TEMPORARY r [1112 CORE I [1116 y 1114 CONNECT TO CORE CONNECT To CORE J CONNECT TO CORE STORAGE STORAGE STORAGE CONTROLLER CONTROLLER CONTROLLER L, T T118 PROVIDE CD1 TO CLIENT '

13 US. Patent Sep. 23, 2008 Sheet 12 0f 26 US 7,428,756 B2 FIGURE 12 I START I RECEIVE SUBSCRIPTION PROFILE I 1202 _/ OBTAIN 1204 DATATYPE J INFORMATION L TRANSLATE TO 1206 SUBSCRIBE E/ REQUEST TRANSLATE TO 1208 FILTERING _/ MESSAGE PROPERTIES 1210 ISSUE / SUBSCRIBE COMMAND END

14 US. Patent Sep. 23, 2008 Sheet 13 0f 26 US 7,428,756 B2 FIGURE RECEIvE DATATYPE INSTANCE J CHECK 1304 SUBSCRIPTION CRITERIA J * 1308 DELIVER DATATYPE /' INSTANCE TO CLIENT

15 US. Patent Sep. 23, 2008 Sheet 14 0f 26 US 7,428,756 B2 FIGURE 14 Subscribe: Filter1: metadataitem3=xyz SUBMITTED SUBSCRIPTION COMMAND TOPIC: \ SUBSCRIBE RULE QUERY DATATYPE 1 EXTRACTION BUILD Subscribe: Filte?: metadataitem2=abc l TOPIC: DATATYPE 2 Select from datatype1 where metadataitem1 =datatype1 match and metadataitem3=xyz \ Select from datatypez where metadataitem1 =datatype1 match and metadataitem2=abc & QUERY 1 QUERY 2 IF DATATYPE 1 IF DATATYPE 2 ARRIVES ARRIVES

16 US. Patent Sep. 23, 2008 Sheet 15 0f 26 US 7,428,756 B2 FIGURE 15 ( START ) RECEIVE 1502 DATATYPE '/ INSTANCE 1 CHECK 1504 SUBSCRiPTlON / CRITERIA I I CHECK 1506 SUBSCRIPTION _/ RELEVANCE DEFINITION OTHER RELEVANT OATATYPEs? 1508 QUERY FOR DATATYPES 1510 J " 1512 RECEIVE _/ RELEVANT DATATYPES E I: ' 1514 DELEVER DATATYPE INSTANCES TO CLIENT END

17 US. Patent Sep. 23, 2008 Sheet 16 0f 26 US 7,428,756 B2 FIGURE 16 l RECEWE PUBLISH REQUEST i J VALIDATE 1604 REQUEST J 1606 save METADATA / AND DATA ' 1608 PUBLISH DATA J

18 US. Patent Sep. 23,2008 Sheet 17 0f 26 US 7,428,756 B2 234 CLIENT 234 CLIENT CLIENT MODULE STORAGE CONTROLLER 260 CLIENT MODULE / / PROPERTIES FILE DATABASE SERVER 225 STORAGE CONTROLLER FIGURE 17A PROPERTIES FILE DATABASE SERVER FIGURE 17B

19 US. Patent Sep. 23, 2008 Sheet 18 0f 26 US 7,428,756 B2 FIGURE STORAGE CONTROLLER 1802 STORAGE CONTROLLER INTERFACE 1804 LOCAL MODE PLUG-IN JDBC INTERFACE HTTP INTERFACE JDBC HTTP E RDBMS PROPERTIES DATABASE 154 FILE SERVER STORAGE

20 US. Patent Sep. 23, 2008 Sheet 19 0f 26 US 7,428,756 B2 FIGURE STORAGE CONTROLLER 1802 STORAGE CONTROLLER INTERFACE 1902 REMOTE MODE PLUG-IN HTTP INTERFACE HTTP 1904 HTTP INTERFACE 1906 REMOTE server JDBC INTERFACE HTTP INTERFACE \ JDBC HTTP E o RDBMS PROPERTIES DATABASE 154 FILE SERVER STORAGE

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47