System and method for controlling access to resources in a...

Details System and method for controlling access to resources in a... System and method for controlling access to resources in a...

2005-09-13

2005-09-13

Sheikh, Ayaz (Department: 2131)

Electrical computers and digital processing systems: support

Multiple computer communication using cryptography

Protection at a particular protocol layer

C709S229000, C707S793000

Reexamination Certificate

active

06944777

ABSTRACT:
A distributed access controller for controlling access to resources in a multi-domain distributed computing environment. The access controller is configured to receive a request from a user requesting performance of one or more operations on a particular resource. The access controller attempts to resolve the requested operations based on user hierarchy information and access list information for the particular resource. If all the operations in the user's request cannot be resolved based on the user hierarchy information and the access list information for the particular resource, the access controller then attempts to resolve the unresolved operations based on the particular user's user hierarchy information in combination with resource hierarchy information, and access list information for the resources in the resource hierarchy information. In alternate embodiments, the access controller attempts to resolve the requested operations based on the resource hierarchy information and access list information for the resources in the resource hierarchy information. If all the operations in the user's request cannot be resolved based on the resource hierarchy information and the access list information for the resources in the resource hierarchy information, the access controller then attempts to resolve the unresolved operations based on the resource hierarchy information in combination with the particular user's user hierarchy information, and the access list information for the resources in the resource hierarchy information.

REFERENCES:
patent: 5187787 (1993-02-01), Skeen et al.
patent: 5257369 (1993-10-01), Skeen et al.
patent: 5335346 (1994-08-01), Fabbio
patent: 5475587 (1995-12-01), Anick et al.
patent: 5557798 (1996-09-01), Skeen et al.
patent: 5778185 (1998-07-01), Gregerson et al.
patent: 5787427 (1998-07-01), Benantar et al.
patent: 5826250 (1998-10-01), Trefler
patent: 5878415 (1999-03-01), Olds
patent: 5878420 (1999-03-01), de la Salle
patent: 5956715 (1999-09-01), Glasser et al.
patent: 5970490 (1999-10-01), Morgenstern
patent: 6047377 (2000-04-01), Gong
patent: 6061684 (2000-05-01), Glasser et al.
patent: 6105027 (2000-08-01), Schneider et al.
patent: 6173404 (2001-01-01), Colburn et al.
patent: 6202066 (2001-03-01), Barkley et al.
patent: 6308173 (2001-10-01), Glasser et al.
patent: 6408336 (2002-06-01), Schneider et al.
patent: 6438549 (2002-08-01), Aldred et al.
“Department of Defense Trusted Computer System Evaluation Criteria,”, Department of Defense Standard, http://www.cs.berkeley.edu/˜daw/cl. . .l/reading/orange-book-excerpts.txt, Dec. 1985, pp. 1-13.
Belani, E. et al., “The CRISIS Wide Area Security Architecture”, 7th USENIX Security Symposium, Jan. 1998, 15 pages.
Abadi, M. et al., “A Calculus for Access Control in Distributed Systems”, ACM Trans. on Programming Lang. and Systems, vol. 15, No. 3, Sep. 1993, pp. 1-29.
Lampson, B. et al., “Authentication in Distributed Systems: Theory and Practice”, ACM, 1992, pp. 1-47.

Affiliated with

Also associated with

Rating

System and method for controlling access to resources in a... does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with System and method for controlling access to resources in a..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and System and method for controlling access to resources in a... will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-3415232