发明授权
US07200869B1 System and method for protecting domain data against unauthorized modification
有权
保护域数据免受未经授权的修改的系统和方法
- 专利标题: System and method for protecting domain data against unauthorized modification
- 专利标题(中): 保护域数据免受未经授权的修改的系统和方法
-
申请号: US09663811申请日: 2000-09-15
-
公开(公告)号: US07200869B1公开(公告)日: 2007-04-03
- 发明人: Donald J. Hacherl , Praerit Garg , Murli D. Satagopan , Robert P. Reichel
- 申请人: Donald J. Hacherl , Praerit Garg , Murli D. Satagopan , Robert P. Reichel
- 申请人地址: US WA Redmond
- 专利权人: Microsoft Corporation
- 当前专利权人: Microsoft Corporation
- 当前专利权人地址: US WA Redmond
- 代理机构: Merchant & Gould, P.C.
- 代理商 Ryan T. Grace
- 主分类号: G06F7/04
- IPC分类号: G06F7/04 ; G06F17/30 ; G06K9/00 ; H03M1/68 ; H04K1/00 ; G06F15/16 ; G06F11/30 ; G06F12/14 ; H04L9/32
摘要:
Described is an invention for safeguarding against the modification of certain data associated with one domain of a distributed network by an entity (such as an administrator) within another domain of the distributed network while still allowing the entity to modify other data associated with the one domain. More particularly, security safeguards are applied by a directory replication service that operates to replicate the shared data to each domain in a domain “forest.” Those security safeguards allow a user to indicate that certain modifications of specified shared data may only be made within the domain in which the shared data was created. In that way, a shared data namespace may still be implemented in which trust relationships exist so that, for example, an administrator in one domain may alter a configuration of another domain within the forest. However, certain data may be restricted by these safeguards such that certain modifications of that data (e.g., taking ownership of the data) may only be done from the domain which currently owns the data.