Abstract The method of the present invention may be utilized to provide user access control for a plurality of resource objects within a distributed data processing system having a plurality of resource managers. A reference monitor service is established and a plurality of access control profiles are stored therein. Thereafter, selected access control profile information may be communicated between the reference monitor service and a resource manager in response to an attempted access of a particular resource object controlled by that resource manager. A resource manager may utilize this communication technique to retrieve, modify, or delete a selected access control profile, as desired. Further, the resource manager may utilize this communication technique to control access to a resource object by utilizing the information contained within the access control profile to determine if the requester is authorized to access the resource object and whether or not the requester has been granted sufficient authority to take selected actions with respect to that resource object. In a preferred embodiment of the present invention, each access control profile may include access control information relating to a selected user; a selected resource object; a selected group of users; a specified level of authority associated with a selected user; a selected set of resource objects; or, a predetermined set of resource objects and a selected list of users each authorized to access at least a portion of said predetermined set of resource objects.
A method of providing user access control for a plurality of resource objects within a distributed data processing system having a plurality of resource managers associated with said plurality of resource objects, said method comprising the steps of: storing a plurality of access control profiles within a reference monitor service; establishing communication between said reference monitor service and said plurality of resource managers; and controlling access to a selected resource object associated with a particular resource manager by means of a selected one of said plurality of access control profiles.
Claim 2
Dependent Claim
79 words
The method of providing user access control for a plurality of resource objects within a distributed data processing system according to Claim 1 wherein said step of controlling access to a selected resource object associated with a particular resource manager by means of a selected one of said plurality of access control profiles comprises the step of retrieving a selected one of said plurality of access control profiles in response to an attempted access of said selected resource object.
Claim 3
Dependent Claim
88 words
The method of providing user access control for a plurality of resource objects within a distributed data processing system according to Claim 1 wherein said step of controlling access to a selected resource object associated with a particular resource manager by means of a selected one of said plurality of access control profiles comprises the step of modifying said selected one of said plurality of access control profiles within said reference monitor service in response to a communication from a selected one of said plurality of resource managers.
Claim 4
Dependent Claim
88 words
The method of providing user access control for a plurality of resource objects within a distributed data processing system according to Claim 1 wherein said step of controlling access to a selected resource object associated with a particular resource manager by means of a selected one of said plurality of access control profiles comprises the step of deleting said selected one of said plurality of access control profiles within said reference monitor service in response to a communication from a selected one of said plurality of resource managers.
Claim 5
Dependent Claim
82 words
The method of providing user access control for a plurality of resource objects within a distributed data processing system according to Claim 1 wherein said step of controlling access to a selected resource object associated with a particular resource manager by means of a selected one of said plurality of access control profiles comprises the step of modifying said selected one of said plurality of access control profiles within said reference monitor service to grant access to a second selected resource object.
Claim 6
Dependent Claim
81 words
The method of providing user access control for a plurality of resource objects within a distributed data processing system according to Claim 1 wherein said step of controlling access to a selected resource object associated with a particular resource manager by means of a selected one of said plurality of access control profiles comprises the step of modifying said selected one of said plurality of access control profiles within said reference monitor service to revoke access to a selected resource object.
Claim 7
Dependent Claim
81 words
The method of providing user access control for a plurality of resource objects within a distributed data processing system according to Claim 1 wherein said step of controlling access to a selected resource object associated with a particular resource manager by means of a selected one of said plurality of access control profiles comprises the step of determining from said selected one of said plurality of access control profiles whether a selected user is authorized to access said selected resource object.
Claim 8
Dependent Claim
49 words
The method of providing user access control for a plurality of resource objects within a distributed data processing system according to Claim 1 wherein said plurality of access control profiles each includes an indication of selected activities permitted with respect to a selected resource object by a particular user.
Claim 9
Dependent Claim
87 words
The method of providing user access control for a plurality of resource objects within a distributed data processing system according to Claim 8 wherein said step of controlling access to a selected resource object associated with a particular resource manager by means of a selected one of said plurality of access control profiles comprises the step of determining from said selected one of said plurality of access control profiles whether a particular user is permitted to perform a selected activity with respect to said selected resource object.
References Cited (Backward Citations)
No citation records indexed.
USPTO Annuity & Maintenance Windows
Maintenance schedule is calculated for granted US utility patents.