Information security – Policy
Reexamination Certificate
2007-08-14
2007-08-14
Song, Hosuk (Department: 2135)
Information security
Policy
C726S002000, C726S004000, C726S010000
Reexamination Certificate
active
10448170
ABSTRACT:
Securely authorizing the performance of actions may be enabled by linking each secure/privileged action to a requisite policy for authorizing that secure/privileged action. In a described media implementation, one or more electronically-accessible media include electronically-executable instructions that, when executed, direct an electronic device to execute operations including: receiving an action performance request that is directed to a requested action; locating an authorization policy that is associated with the requested action from among multiple authorization policies, the authorization policy indicating how performance of the requested action can be authorized; and extracting at least one rule and one or more authentication ticket requirements from the authorization policy. Example operations may further include: determining whether one or more authentication tickets have been validated in accordance with the at least one rule and/or the one or more authentication ticket requirements; and if so, authorizing performance of the requested action.
REFERENCES:
patent: 6565000 (2003-05-01), Sehr
Tan, E.C., et al., “Group-Access Control of Confidential Files in E-Commerce Management Using Shared-Secret Scheme,” Electronic Commerce Research, vol. 2, No. 1-2, 2002, pp. 151-158.
Hayes, J., “Policy-based Authentication and Authorization: Secure Access to the Network Infrastructure,” Proceedings 16th Annual Computer Security Applications Conference, Dec. 11-15, 2000, pp. 328-333.
Pejas, J., “Active Access Policy Management in Distributed Supervisory and Control Systems,” 5th National Conference on Diagonstics of Industrial Processes, Sep. 17-19, 2001, pp. 309-314 (plus English Abstract).
Lee & Hayes PLLC
Microsoft Corporation
Song Hosuk
LandOfFree
Securely authorizing the performance of actions does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Securely authorizing the performance of actions, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Securely authorizing the performance of actions will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-3872375