Patent
1994-10-11
1996-12-31
Tung, Kee M.
395680, G06F 1500
Patent
active
055902669
ABSTRACT:
A secure process for untrusted windowing system client programs to transfer data between security domains is mediated by a special trusted client program, the Selection Manager. The mechanism used can be configured to meet the Compartmented Mode Workstation (CMW) requirements capability for regrading cut and paste operations. To meet the CMW cut and paste requirements and to prevent the regrading selection mechanism from acting as a covert channel, the regrading selection mechanism uses dummy window IDs in communicating to the lower level process during a Mandatory Access Control (MAC) upgrade operation, and for all regrading operations, an event is sent to the Selection Manager that causes the Selection Manager to put up a pop-up requesting user confirmation before the transfer is allowed to proceed. This selection mechanism supports configurable regrading selection operations for cutting and pasting (MAC upgrading for all users, MAC downgrading for privileged users, and information label upgrading and downgrading for all users).
REFERENCES:
patent: 4903218 (1990-02-01), Longo et al.
patent: 5073933 (1991-12-01), Rosenthal
patent: 5075884 (1991-12-01), Sherman et al.
patent: 5138712 (1992-08-01), Corbin
patent: 5204961 (1993-04-01), Barlow
Picciotto, "Towards Trusted Cutand Paste in the X Window System", IEEE, 1991, pp. 34-43.
Picciotto et al, "A Comparison of Trusted X Security Policies, Architectures, and Interoperability", IEEE, 1992, pp. 142-152.
Berger et al, "Compartment & Mode Workstation: Prototype Highlights", IEEE, 1990, pp. 608-618.
Epstein et al, "A Prototype B3 Trusted X Window System", IEEE, 1991, pp. 44-55.
Epstein et al, "Evolution of a Trusted B3 Window System Prototype", IEEE, 1992, pp. 226-239.
Epstein et al, "A Prototype for Trusted X Labeling Policies", IEEE, 1990, pp. 221-230.
Asad Khalid A.
Carson Mark E.
Cugini Janet A.
Ranganathan Mudumbai
Breene John E.
International Business Machines - Corporation
Tung Kee M.
Walker Mark S.
LandOfFree
Integrity mechanism for data transfer in a windowing system does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Integrity mechanism for data transfer in a windowing system, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Integrity mechanism for data transfer in a windowing system will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-1148684