Claims Analysis
Total Claims: 11
Claim 1
Independent Claim
102 words
A method of providing user access control for a plurality of resource objects within a distributed data processing system having a plurality of resource managers associated with said plurality of resource objects, said method comprising the steps of: storing a plurality of access control profiles within a reference monitor service (64); exchanging a selected access control profile between said reference monitor service and a selected resource manager in response to an attempted access of a particular resource object (82); and utilizing said resource manager to control access to said particular resource object in accordance with said selected access control profile (90, 98).
Claim 2
Dependent Claim
26 words
The method according to Claim 1 wherein selected ones of said plurality of access control profiles each include access control information relating to a selected user.
Claim 3
Dependent Claim
27 words
The method according to Claim 1 wherein selected ones of said plurality of access control profiles each include access control information relating to a selected resource object.
Claim 4
Dependent Claim
28 words
The method according to Claim 1 wherein selected ones of said plurality of access control profiles each include access control information relating to a selected group of users.
Claim 5
Dependent Claim
29 words
The method according to Claim 1 wherein selected ones of said plurality of access control profiles each include access control information relating to a selected set of resource objects.
Claim 6
Dependent Claim
50 words
The method according to Claim 1 wherein selected ones of said plurality of access control profiles each include access control information relating to a predetermined set of resource objects and a selected list of users each authorized to access at least a portion of said predetermined set of resource objects.
Claim 7
Independent Claim
109 words
A method of providing user access control for a plurality of resource objects within a distributed data processing system having a plurality of resource managers associated with said plurality of resource objects, said method comprising the steps of: establishing a reference monitor service within said distributed data processing system; storing a plurality of access control profiles within said reference monitor service; exchanging a selected access control profile between said reference monitor service and a selected resource manager in response to an attempted access of a particular resource object; and utilizing said resource manager to control access to said particular resource object in accordance with said selected access control profile.
Claim 8
Dependent Claim
26 words
The method according to Claim 7 wherein selected ones of said plurality of access control profiles each include access control information relating to a selected user.
Claim 9
Dependent Claim
27 words
The method according to Claim 7 wherein selected ones of said plurality of access control profiles each include access control information relating to a selected resource object.
Claim 10
Dependent Claim
28 words
The method according to Claim 7 wherein selected ones of said plurality of access control profiles each include access control information relating to a selected group of users.
Claim 11
Dependent Claim
29 words
The method according to Claim 7 wherein selected ones of said plurality of access control profiles each include access control information relating to a selected set of resource objects.