Trusted Information Systems, Inc.

Network Associates, Inc.

David I Dalva

Homayoon Tajalli

David L Sherman

Daniel F Sterne

Stephen T Walker

Mark Lee Badger

M Lee Badger

Lee Badger

A method for superimposing attributes on files stored in a hierarchically organized file system, having at least one file and at least one directory, is disclosed. The method initializes an attribute data base (ADB) with one or more entries having a path descriptor referencing a file in a hierarchical database, an attribute, and an attribute association option describing how the attribute is associated with the file referenced by the path descriptor. The method simplifies maintaining systems employing file attributes to describe files by using the hierarchy of the file system to superimpose attributes on the files. The method provides for handling explicit, implicit, and static associations of attributes with files in the file hierarchy. The method is invoked by a file manager, such as an attribute supplying file hierarchy (ASFH), which resides in the operating system of a computer system having a processor, memory, and a system bus for passing data between the processor and memory. The method can be part of a Hierarchical Attribute Superimposition Subsystem (HASS) which includes an ADB and an ASFH.

System, method and computer program product for superimposing attributes

System and method for superimposing attributes on hierarchically

A system and method for auditing and controlling the use of a computer. An operating system and selected programs and data , referred to as approved applications and approved data , are stored on a protected media which cannot be modified by any ordinary user or application program, regardless of operating system privilege. The protected media can be modified by the operating system, as well as by an administrator using a trusted path mechanism. The trusted path mechanism establishes a reliable communication channel between the administrator and the computer system. The present invention may be configured to collect user audit data concerning user activity and system status and to write the audit data to the protected media. Also, the present invention may be configured to limit execution of application programs to the approved applications.

System and method for controlling the use of a computer

Growing community of inventors

Rockville, MD, United States of America

David I Dalva