专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2014019815A1 MANDATORY PROTECTION CONTROL IN VIRTUAL MACHINES 审中-公开
标题翻译：虚拟机械强制性保护控制
公开(公告)号：WO2014019815A1
公开(公告)日：2014-02-06
申请号：PCT/EP2013/064475
申请日：2013-07-09
申请人： ALCATEL LUCENT
发明人： CLEVY, Laurent , VENELLE, Benjamin , TOINARD, Christian , BRIFFAUD, Jeremy
IPC分类号： G06F21/53 , G06F21/54 , G06F21/62
CPC分类号： H04L63/10 , G06F21/53 , G06F21/54 , G06F21/6218 , G06F2221/2113
摘要： The present invention relates to a method (100) for ensuring Mandatory Access Control (MAC) in a virtual machine (VM) adapted for running object oriented programs and based on strongly typed language, by means of a mandatory access control module (Instr_module), said method comprising: -configuring the mandatory access control module (Instr_module) with an access policy (Acc_pol); -upon event reception indicating a method invocation (Meth_entry) or an access request to a variable member, adding an access control label (Lab E, LabR) to the object calling the method (Meth) or requesting the access, named "caller" (CalR),and the object called by the method (Meth) or whose access is requested, named "callee" (CalE), according to the caller and callee language types (Typ_CalR, Typ_CalE); -making a decision (Dec) of blocking the execution of the method (Meth) or the access to the variable member, named "negative decision", or a decision (Dec) of letting the virtual machine (VM) run the method (Meth) or access the variable member, named "positive decision", according to said access control labels (Lab E, LabR), the instance numbers of the caller and the callee (Inst_Num), the access policy (Acc_pol), and the access permissions; -transmitting said decision (Dec) to the virtual machine (VM) for blocking or granting the corresponding access attempt.
摘要翻译：本发明涉及一种用于通过强制访问控制模块（Instr_module）来确定适于运行面向对象程序并且基于强类型语言的虚拟机（VM）中的强制访问控制（MAC）的方法（100）所述方法包括：使用访问策略（Acc_pol）来配置强制访问控制模块（Instr_module）; 指示方法调用（Meth_entry）或对可变成员的访问请求的上次事件接收，将访问控制标签（Lab E，LabR）添加到调用方法（Meth）或请求访问的对象（称为“呼叫者”（根据调用者和被调用者的语言类型（Typ_CalR，Typ_CalE），通过方法（Meth）调用的对象或请求访问的对象名为“callee”（CalE）; - 决定（Dec）阻止执行方法（Meth）或访问名为“否定决定”的变量成员，或决定（Dec）让虚拟机（VM）运行方法（Meth ）或根据所述访问控制标签（Lab E，LabR），呼叫者和被调用者的实例号（Inst_Num），访问策略（Acc_pol）以及访问权限，访问名为“肯定决定”的变量成员 ; - 将所述决定（Dec）发送到虚拟机（VM）以阻止或授予相应的访问尝试。

IPRDB

热门服务

关于我们

友情链接

联系方式