Method and apparatus for providing secure access to a computer system resource
    1.
    发明授权
    Method and apparatus for providing secure access to a computer system resource 有权
    用于提供对计算机系统资源的安全访问的方法和装置

    公开(公告)号:US06993581B1

    公开(公告)日:2006-01-31

    申请号:US10238219

    申请日:2002-09-10

    IPC分类号: G06F12/14

    CPC分类号: G06F9/5016

    摘要: Methods and apparatus for managing access to a plurality of storage resources in a computer system including a host computer and a storage system. The host computer comprises an application layer including at least one application program, and the computer system includes a plurality of storage resources visible to the application layer. The computer system has an access facility that grants access to the plurality of storage resources and requires a privilege level for the at least one application program to be granted access. In one aspect, requests to access one of the plurality of storage resources from the application layer are intercepted, and at least one of the intercepted requests is modified in a manner that will impact the access facility in determining whether the requestor satisfies the privilege level to be granted access to the one of the plurality of storage resources. Another aspect is directed to a computer system comprising a file system/LVM layer, wherein at least some requests from the application layer to access the plurality of storage resources are directed to the file system/LVM layer for processing and are intercepted, at least one of the intercepted requests is modified to create a modified access request, and a modified access request is sent to the file system/LVM layer in place of the intercepted request.

    摘要翻译: 用于管理对包括主计算机和存储系统的计算机系统中的多个存储资源的访问的方法和装置。 主机包括包括至少一个应用程序的应用层,并且该计算机系统包括可应用层可见的多个存储资源。 计算机系统具有访问设施,其允许对多个存储资源的访问,并且要求授权访问所述至少一个应用程序的特权级别。 在一个方面,拦截从应用层访问多个存储资源中的一个的请求,并且所述被拦截的请求中的至少一个被修改,以便在确定请求者是否满足特权级别时影响访问设施的方式 被授权访问多个存储资源中的一个。 另一方面涉及包括文件系统/ LVM层的计算机系统,其中来自应用层的访问多个存储资源的至少一些请求被引导到文件系统/ LVM层以进行处理并被拦截,至少一个 被拦截的请求被修改以创建经修改的访问请求,并且修改的访问请求被发送到文件系统/ LVM层而不是截取的请求。

    Method and apparatus for providing secure access to a computer system resource
    2.
    发明授权
    Method and apparatus for providing secure access to a computer system resource 有权
    用于提供对计算机系统资源的安全访问的方法和装置

    公开(公告)号:US06993589B1

    公开(公告)日:2006-01-31

    申请号:US10238806

    申请日:2002-09-10

    IPC分类号: G06F15/16

    CPC分类号: G06F9/5016

    摘要: Method and apparatus for managing access to one of a plurality of raw storage devices in a computer system including a host computer and a storage system. The computer system includes a plurality of logical volumes of data that are visible to the host computer and the storage system and are perceived by the host computer as comprising a plurality of raw storage devices. The host computer includes a file system/LVM mapping layer. In accordance with one aspect of the invention, a request, from a requester having less than system administrator access privileges, to perform an action directly on the one of the plurality of raw storage devices is granted, so that a logical channel is provided to directly access the one of the plurality of raw storage devices without the logical channel being mapped by the file system/LVM mapping layer. Another aspect is directed to a computer system including a host computer comprising an application layer including at least one application program. A plurality of volumes of storage are visible to the application layer, and access privileges less than the root access privileges are assigned to the at least one application program to access the plurality of volumes of storage.

    摘要翻译: 用于管理对包括主计算机和存储系统的计算机系统中的多个原始存储设备之一的访问的方法和装置。 计算机系统包括主机计算机和存储系统可见的多个逻辑卷数据,并且被主计算机感知为包括多个原始存储设备。 主机包括文件系统/ LVM映射层。 根据本发明的一个方面,允许具有小于系统管理员访问权限的请求者直接对多个原始存储设备之一执行动作的请求,从而直接提供逻辑信道 访问多个原始存储设备中的一个,而不会由文件系统/ LVM映射层映射逻辑信道。 另一方面涉及包括主计算机的计算机系统,主计算机包括包括至少一个应用程序的应用层。 许多卷的存储对应用层可见,并且小于根访问特权的访问权限被分配给至少一个应用程序以访问多个卷的存储。

    Method and apparatus for providing secure access to a computer system resource
    3.
    发明授权
    Method and apparatus for providing secure access to a computer system resource 有权
    用于提供对计算机系统资源的安全访问的方法和装置

    公开(公告)号:US06449652B1

    公开(公告)日:2002-09-10

    申请号:US09224789

    申请日:1999-01-04

    IPC分类号: G06F1516

    CPC分类号: G06F9/5016

    摘要: Method and apparatus for managing access to one of a plurality of raw storage devices in a computer system including a host computer and a storage system that is coupled to the host computer and that stores data accessed by the host computer. The computer system includes a plurality of logical volumes of data that are visible to the host computer and the storage system and are perceived by the host computer as comprising the plurality of raw storage devices. In accordance with one aspect of the invention, a request to perform an action on the one of the plurality of raw storage devices can be granted, even when the requester has less than system administrator access privileges. In accordance with another aspect of the invention, the one of the plurality of raw storage devices may have associated access privileges information. The access privileges information associated with the one of the plurality of raw storage devices may be compared with information descriptive of the requester, and the request may be granted when the access privileges information associated with the one of the plurality of raw storage devices indicates that the requester is privileged to perform the action on the one of the plurality of raw storage devices.

    摘要翻译: 用于管理对包括主计算机和存储系统的计算机系统中的多个原始存储设备之一的访问的方法和装置,所述主计算机和存储系统耦合到所述主计算机并且存储由所述主计算机访问的数据。 计算机系统包括对主计算机和存储系统可见的多个逻辑卷数据,并且由主计算机感知为包括多个原始存储设备。 根据本发明的一个方面,即使当请求者具有少于系统管理员访问特权时,也可以授予对多个原始存储设备之一执行动作的请求。 根据本发明的另一方面,多个原始存储设备中的一个可以具有相关联的访问特权信息。 可以将与多个原始存储设备中的一个原始存储设备相关联的访问权限信息与描述请求者的信息进行比较,并且当与多个原始存储设备中的一个原始存储设备相关联的访问权限信息指示 请求者有权对多个原始存储设备之一执行动作。

    Methods and apparatus for a data driven system implementation using model components
    7.
    发明授权
    Methods and apparatus for a data driven system implementation using model components 有权
    使用模型组件实现数据驱动系统的方法和设备

    公开(公告)号:US08886751B1

    公开(公告)日:2014-11-11

    申请号:US13249343

    申请日:2011-09-30

    CPC分类号: G06F7/00 H04L67/00 H04L67/02

    摘要: Methods and apparatus for receiving a request from a user of a system, the request having a format defined by a template, expanding the request to combine user supplied data and data from a model component containing data for a component of the system to form an expanded request, wherein the expanded request has a predetermined format, acquiring information to determine how to process the expanded request, communicating with a host computer to extract information needed to satisfy the expanded request, generating an internal response to the expanded request containing the acquired information, inserting result data from the internal response into the model component, generating a user response to the user request, and sending the user response to the user to satisfy the user request.

    摘要翻译: 用于从系统的用户接收请求的方法和装置,所述请求具有由模板定义的格式,扩展组合用户提供的数据的请求和来自包含用于系统的组件的数据的模型组件的数据,以形成扩展的 请求,其中所述扩展请求具有预定格式,获取信息以确定如何处理所述扩展请求,与主机通信以提取满足所述扩展请求所需的信息,生成对包含所获取的信息的扩展请求的内部响应, 将结果数据从内部响应插入到模型组件中,产生用户对用户请求的响应,并向用户发送用户响应以满足用户请求。

    Adjustable mouse pad support
    8.
    发明授权
    Adjustable mouse pad support 失效
    可调鼠标垫支持

    公开(公告)号:US6079676A

    公开(公告)日:2000-06-27

    申请号:US967955

    申请日:1997-11-12

    IPC分类号: A47B21/03 B68G5/00

    CPC分类号: A47B21/0314 Y10S248/918

    摘要: An adjustable support assembly for a digitizer device, such as a track ball or mouse, mounts between a computer keyboard support tray and an articulating arm normally attached to the tray for supporting and adjusting the tray. The support assembly includes a right-hand support pad and a left-hand support pad that are slidable underneath the keyboard support tray in a stored position. One of the pads can be selectively exposed for use, while the other pad is stored underneath the keyboard support tray. The upper surface of the support pads are textured to enhance the tracking movement of a mouse ball. The exposed mouse pad is rotatably adjustable about an axis parallel to a longitudinal axis of the keyboard support tray to provide a horizontal surface for the mouse to ride on, even if the keyboard support tray is tilted away from horizontal. The support pads additionally include a slot extending inwardly from an outer edge thereof. The slot has opposing inner faces and a cord of resilient material with a high coefficient of friction material projecting from the faces toward each other to create a gap. The gap resiliently and frictionally holds a data cord associated with the digitizer device. The yieldable nature of the resilient material prevents damage to the data cord while securely retaining the data cord in the slot.

    摘要翻译: 用于数字转换器装置(例如轨迹球或鼠标)的可调节支撑组件安装在计算机键盘支撑托盘和通常附接到托盘的铰接臂之间,用于支撑和调节托盘。 支撑组件包括右侧支撑垫和左侧支撑垫,其能够在存储位置的键盘支撑托盘下方滑动。 其中一个焊盘可以选择性地暴露以供使用,而另一个焊盘则存储在键盘支撑托盘的下面。 支撑垫的上表面被纹理化以增强鼠标球的跟踪运动。 暴露的鼠标垫可围绕平行于键盘支撑盘的纵向轴线的轴线可旋转地调节,以提供用于鼠标骑行的水平表面,即使键盘支撑托盘从水平方向倾斜。 支撑垫另外包括从其外边缘向内延伸的槽。 狭槽具有相对的内表面和具有高摩擦系数材料的弹性材料的绳索,从该表面向彼此突出以产生间隙。 间隙弹性地和摩擦地保持与数字转换器装置相关联的数据线。 弹性材料的可屈服性质可防止数据线损坏,同时将数据线牢固地保持在槽中。