Universal authorization and access control security measure...

Details Universal authorization and access control security measure... Universal authorization and access control security measure...

2011-01-04

2011-01-04

Zand, Kambiz (Department: 2434)

Information security

Policy

C726S003000, C726S004000, C726S005000, C726S006000, C726S011000, C726S012000, C726S017000, C726S021000, C726S027000, C726S028000, C726S029000, C726S030000, C713S170000, C713S171000, C713S172000

Reexamination Certificate

active

07865931

ABSTRACT:
The invention provides a system that includes: a web server, an application server, and a data server all connected to each other. The system is intended to protect web based applications. A web server receives a request and transmits it as a message to the application server. When the application server receives the request, the application server extracts attributes of this request. The application server uses an authorization engine to determine if each attribute of the request is authorized by accessing the data server to compare each attribute of the request with at least one rule from a rules store. The rules store resides on the data server. If the attributes of the request meet the rules in the rules store, then the request is executed by the application server.

REFERENCES:
patent: 5455953 (1995-10-01), Russell
patent: 5592622 (1997-01-01), Isfeld et al.
patent: 5875330 (1999-02-01), Goti
patent: 6014666 (2000-01-01), Helland et al.
patent: 6158007 (2000-12-01), Moreh et al.
patent: 6185682 (2001-02-01), Tang
patent: 6185689 (2001-02-01), Todd, Sr. et al.
patent: 6304967 (2001-10-01), Braddy
patent: 6510236 (2003-01-01), Crane et al.
patent: 6807636 (2004-10-01), Hartman et al.
patent: 6941285 (2005-09-01), Sarcanin
patent: 6965939 (2005-11-01), Cuomo et al.
patent: 6986040 (2006-01-01), Kramer et al.
patent: 7016875 (2006-03-01), Steele et al.
patent: 7039804 (2006-05-01), Fichtner et al.
patent: 2003/0120601 (2003-06-01), Ouye et al.
patent: WO 91/08543 (1991-06-01), None
patent: WO 96/31828 (1996-10-01), None
http://en.wikipedia.org/wiki/Common—Gateway—Interface.
http://en.wikipedia.org/wiki/Active—Server—Page.
http://en.wikipedia.org/wiki/Java—servlet.
http://en.wikipedia.org/wiki/JavaServer—pages.
http://enwikipedia.org/wiki/Javascript.
http://en.wikipedia.org/wiki/Corba.
http://en.wikipedia.org/wiki/IIOP.

Affiliated with

Also associated with

Rating

Universal authorization and access control security measure... does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Universal authorization and access control security measure..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Universal authorization and access control security measure... will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-2667939