Electrical computers and digital processing systems: support – Multiple computer communication using cryptography – Protection at a particular protocol layer
Reexamination Certificate
1998-07-30
2002-01-15
Hayes, Gail (Department: 2131)
Electrical computers and digital processing systems: support
Multiple computer communication using cryptography
Protection at a particular protocol layer
C717S152000
Reexamination Certificate
active
06339829
ABSTRACT:
BACKGROUND OF THE INVENTION
1. Technical Field
The present invention relates to both a method and an apparatus for decoupling a Java Virtual Machine (JVM) from an internet browser. Specifically, the system involves the storage of extended security information in a data structure that shadows a Java class object.
2. Description of Related Art
Internet, also referred to as an “internetwork”, in communications is a set of computer networks, possibly dissimilar, joined together by means of gateways that handle data transfer and the conversion of messages from the sending network to the protocols used by the receiving network (with packets if necessary). When capitalized, the term “Internet” refers to the collection of networks and gateways that use the TCP/IP suite of protocols.
The Internet has become a cultural fixture as a source of both information and entertainment. Many businesses are creating Internet sites as an integral part of their marketing efforts, informing consumers of the products or services offered by the business or providing other information seeking to engender brand loyalty. Many federal, state, and local government agencies are also employing Internet sites for informational purposes, particularly agencies which must interact with virtually all segments of society such as the Internal Revenue Service and secretaries of state. Operating costs may be reduced by providing informational guides and/or searchable databases of public records online.
Currently, the most commonly employed method of transferring data over the Internet is to employ the World Wide Web environment, also called simply “the web”. Other Internet resources exist for transferring information, such as File Transfer Protocol (FTP) and Gopher, but have not achieved the popularity of the web. In the web environment, servers and clients effect data transaction using the Hypertext Transfer Protocol (HTTP), a known protocol for handling the transfer of various data files (e.g., text, still graphic images, audio, motion video, etc.). Information is formatted for presentation to a user by a standard page description language, the Hypertext Markup Language (HTML). In addition to basic presentation formatting, HTML allows developers to specify “links” to other web resources identified by a Uniform Resource Locator (URL). A URL is a special syntax identifier defining a communications path to specific information. Each logical block of information accessible to a client, called a “page” or a “web page”, is identified by a URL. The URL provides a universal, consistent method for finding and accessing this information by the web “browser”. A browser is a program capable of submitting a request for information identified by a URL at the client machine. Retrieval of information on the web is generally accomplished with an HTML-compatible browser.
When a user desires to retrieve a page, a request is submitted to a server connected to a client computer at which the user is located and may be handled by a series of servers to effect retrieval of the requested information. The information is provided to the client formatted according to HTML. Typically, personal computers (PCs) along with work stations are typically used to access the Internet.
Often applications or programs may be sent to a computer from a web server across the Internet. Java applications are becoming increasingly more prevalent as the type of application sent between web servers and client computers. Java applications are common on the Internet and becoming more increasingly common in intranets and in other types of networks used in businesses.
Java is an object oriented programming language and environment focusing on defining data as objects and the methods that may be applied to those objects. Java supports only a single inheritance, meaning that each class can inherit from only one other class at any given time. Java also allows for the creation of totally abstract classes known as interfaces, which allow the defining of methods that may be shared with several classes without regard for how other classes are handling the methods.
The Java virtual machine (JVM) is a virtual computer component that resides only in memory. The JVM allows Java programs to be executed on a different platform as opposed to only the one platform for which the code was compiled. Java programs are compiled for the JVM. In this manner, Java is able to support applications for many types of data processing systems, which may contain a variety of central processing units and operating systems architectures. To enable a Java application to execute on different types of data processing systems, a compiler typically generates an architecture-neutral file format—the compiled code is executable on many processors, given the presence of the Java run-time system. The Java compiler generates bytecode instructions that are non-specific to a particular computer architecture. A bytecode is a machine independent code generated by the Java compiler and executed by a Java interpreter. A Java interpreter is a part in the JVM that alternately decodes and interprets a bytecode or bytecodes. These bytecode instructions are designed to be easy to interpret on any computer and easily translated on the fly into native machine code.
Many currently available web browsers, such Netscape Communicator, which is available from Netscape Communications Corporation, incorporate JVMs as part of the web browser. Presently, however, JVMs updates are provided more often than web browser updates. Such a situation prevents users from taking advantage of improved versions of WMs until the web browser is updated. Therefore, it would be advantageous to have an improved method and apparatus for providing users an ability to use more recent versions of JVMs without having to wait for an updated version of the web browser. However, Netscape redefined the JVM's internal (non-overrideable and non-replaceable) class data structure to include additional security information. Specifically, Netscape added their certificate model called “ziggy” to this internal structure. While this works as an implementation, a change to the internals of a JVM to store additional security information breaks the security capabilities. Therefore, to provide the required Netscape security capabilities, an alternative design is needed.
SUMMARY OF THE INVENTION
The present invention modifies the implementation of the Netscape security model to use an apparatus to set and get extended class data. More specifically, use of the apparatus to store the additional security information for later retrieval at the point where this information would have been written into the Java class data structure, and retrieve this information at the point it would have been read from the Java class data structure. The apparatus is implemented by creating a hash table of objects that store the extended class information. The hash key function uses the original class reference to lookup the classes shadow data structure.
REFERENCES:
patent: 5694569 (1997-12-01), Fischer
patent: 5727145 (1998-03-01), Nessett et al.
patent: 5748960 (1998-05-01), Fischer
patent: 5958050 (1999-09-01), Griffin et al.
patent: 6092194 (2000-07-01), Touboul
patent: 6105072 (2000-07-01), Fischer
patent: 6154844 (2000-11-01), Touboul et al.
patent: 6230184 (2001-05-01), White et al.
patent: 6272677 (2001-08-01), Lam et al.
Lindholm et al, “The Java Virtual Machine Specification”, Sun Microsystems, Inc., Sep. 1996, pp. 83-89.
Beadle Bruce Anthony
Brown Michael Wayne
Nizinski, Jr. Leonard Robert
Rothert Douglas Scott
Hayes Gail
LaBaw Jeffrey S.
Revak Christopher
Walder, Jr. Stephen J.
Yee Duke W.
LandOfFree
Method and apparatus to store extended security information... does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Method and apparatus to store extended security information..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Method and apparatus to store extended security information... will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-2819521