Data processing: database and file management or data structures – Database design – Data structure types
Reexamination Certificate
1995-11-29
2001-10-02
Black, Thomas G. (Department: 2171)
Data processing: database and file management or data structures
Database design
Data structure types
C709S223000, C711S100000
Reexamination Certificate
active
06298346
ABSTRACT:
BACKGROUND OF THE INVENTION
1. Field of the Invention
This invention relates to a method and apparatus for supporting a cooperative activity in a system such as a television conference system wherein a plurality of participants cooperate to perform an activity.
2. Description of the Related Art
In a cooperative activity environment such as a conventional television conference system, control for participation in the cooperative activity and for access to shared information used in the activity is not satisfactory. The reason for this is as follows: In a single-function, special-purpose cooperative activity system, whether or not participation in the conference is allowed or denied to a person depends upon whether use of the television conference equipment can be acquired from his terminal, as in the manner of a telephone. In addition, by using a dedicated line for the conference system, leakage of information to a third party is prevented. In a case where someone participates in a certain cooperative activity, therefore, participation is allowed without requiring a special check to determine whether or not the participation should be permitted. Furthermore, when access is made to information shared in the cooperative activity, access to the information is allowed merely by simple access control.
Access control carried out in a conventional television conference system will be described with reference to a specific example. In this example, whether participation of a new participant (namely a new writer or new editor) in a cooperative editing activity in a stand-alone computer is allowed or denied is decided based upon static information using a conventional technique similar to that of access control in a UNIX file system. That is, in the access control described here, whether or not participation is allowed is decided based upon the access attributes of shared data to be edited.
First, in order to simplify the description, a name is given to the object of processing. For example, let the cooperative editing activity be “Cooperative Editing #302” and let a new participant be “Participant #46”. Each cooperative editing activity has the attribute of the owner, just as in the case of UNIX file system. Similarly, the activity possesses access control attributes classified into three relationships, namely (1) user, (2) group and (3) other, and each has data representing (a) executable, (b) writable and (c) readable or data which is a combination of these data.
Under these settings, processing executed when “Participant #46” requests participation in “Cooperative Editing #302” is as follows:
First, the owner attributes of “Participant #46” and of “Cooperative Editing #302” are compared and it is determined whether the relationship is (1), (2) or (3) above. Next, the access control attribute relevant to this relationship is extracted and whether or not the participation request is allowed is decided based upon this attribute. For example, if “(a) executable” has been designated for the extracted control attribute, then participation becomes possible. In case of other attributes, however, it is decided that participation is not allowed. This is capable of being decided statically irrespective of the status of execution. Such access control processing is executed as part of system call processing of a UNIX operating system in a case where a UNIX file system is accessed, by way of example. In case of the cooperative editing activity described here, the access control processing is incorporated in cooperative activity software for the purpose of carrying out the cooperative editing activity, or an independent dedicated access control unit is prepared and processing is executed. Further, in case of UNIX or the like, access control for accessing a file in a file system and control of participation in a session such as log-in is managed based upon different frameworks. More specifically, with regard to accessing of a file, a decision is made upon referring to access permission set file by file. With regard to log-in, the decision is rendered upon referring to the content of a file “/etc/password”.
Moreover, these decisions are rendered statically based upon file access permission or file content and status at the time of execution is not taken into consideration.
The recent popularization of high-performance computers connected by a high-speed network and the development of distributed computing software have made it possible to use a plurality of computers to perform a cooperative activity by a group comprising a plurality of individuals. Under these conditions, control for allowing or denying participation of each participant in a cooperative activity and for accessing information used therein is an important requirement in terms of carrying out the cooperative activity. In other words, in the prior art, access control is performed with regard to static information. However, in a case where a plurality of participants take part in a cooperative activity, it is necessary to carry out control for access to dynamic information for executing a program in the cooperative activity or participating therein. If the foregoing cannot be controlled properly and put to use in the cooperative activity, the progress of the cooperative activity will be impeded. The actual problems that arise when access control in a cooperative activity is not performed correctly are as follows:
(1) a decline in service caused by acceptance of more participants than the capacity for the processing;
(2) leakage of confidential information; and
(3) failure of the cooperative activity because of improper quantities of information.
SUMMARY OF THE INVENTION
An object of the present invention is to provide a method and apparatus for supporting a cooperative activity in which it is possible to perform flexible control for accessing data used in a cooperative activity.
Another object of the present invention is to provide a method and apparatus for supporting a cooperative activity-in which access control information in a cooperative activity is given in a hierarchical structure and assigned to data used in a cooperative activity so that whether processing is allowed or not can be decided in individual cooperative activities.
A further object of the present invention is to provide a method and apparatus for supporting a cooperative activity in which data in cooperative activity can be accessed dynamically in conformity with the status of execution of the cooperative activity.
Other features and advantages of the present invention will be apparent from the following description taken in conjunction with the accompanying drawings, in which like reference characters designate the same or similar parts throughout the figures thereof.
REFERENCES:
patent: 4104718 (1978-08-01), Poublan et al.
patent: 5113442 (1992-05-01), Moir
patent: 5136712 (1992-08-01), Perazolli, Jr. et al.
patent: 5173939 (1992-12-01), Abadi et al.
patent: 5315657 (1994-05-01), Abadi et al.
patent: 5481715 (1996-01-01), Hamilton et al.
patent: 5504895 (1996-04-01), Kurosawa et al.
patent: 5627987 (1997-05-01), Nozue et al.
patent: 5630125 (1997-05-01), Zellweger
patent: 5675782 (1997-10-01), Montague et al.
patent: 5701458 (1997-12-01), Bsaibes et al.
patent: 5708812 (1998-01-01), Van Dyke et al.
patent: 5768516 (1998-06-01), Swift et al.
patent: 5794006 (1999-03-01), Sanderman
patent: 5890189 (1999-03-01), Nozue et al.
patent: 5894573 (1999-04-01), Fukasawa et al.
patent: 6038543 (2000-03-01), Kurosawa
patent: 6047288 (2000-04-01), Kurosawa et al.
patent: 2272312 (1994-05-01), None
patent: WO 9309499 (1993-05-01), None
IBM Tech. Disc. Bull., vol. 36, No. 10, Oct. 1993, pp. 55-56, “Delegation Method In Access Control”.
IBM Tech. Disc. Bull., vol. 32, No. 10A, Mar. 1990, pp. 304-305, “Reference Monitor—Granular Acces Authorization Levels”.
Black Thomas G.
Canon Kabushiki Kaisha
Fitzpatrick ,Cella, Harper & Scinto
Rones Charles L.
LandOfFree
Method and apparatus for supporting cooperative activity does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Method and apparatus for supporting cooperative activity, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Method and apparatus for supporting cooperative activity will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-2584913