Claims Analysis
Total Claims: 9
Claim 1
Independent Claim
130 words
A method of providing variable authority level user access control for a plurality of resource objects within a distributed data processing system having a plurality of resource managers associated with said plurality of resource objects, said method comprising the steps of: storing within a reference monitor service a plurality of access control profiles, each including an identification of a selected user and a specified level of authority associated with said selected user; exchanging a selected access control profile between said reference monitor service and a selected resource manager in response to an attempted access of a particular resource object by a selected user; and utilizing said resource manager to control access to said particular resource object by said selected user, to the extent permitted by said specified level of authority.
Claim 2
Dependent Claim
42 words
The method of providing variable authority level user access control for a plurality of resource objects within a distributed data processing system according to Claim 1 wherein said plurality of access control profiles each includes an identification of a selected resource object.
Claim 3
Dependent Claim
60 words
The method of providing variable authority level user access control for a plurality of resource objects within a distributed data processing system according to Claim 1 wherein selected ones of said plurality of access control profiles include an identification of a selected group of users and a specified level of authority associated with each of said selected group of users.
Claim 4
Independent Claim
140 words
A method of providing variable authority level user access control for a plurality of resource objects within a distributed data processing system having a plurality of resource managers associated with said plurality of resource objects, said method comprising the steps of: storing within a reference monitor service a plurality of access control profiles, each including an identification of a selected user and a specified level of authority associated with said selected user; exchanging a selected access control profile between said reference monitor service and a selected resource manager in response to an attempted access of a particular resource object by a selected user; determining the access intent of said selected user; and utilizing said resource manager to control access to said particular resource object by said selected user by comparison of said access intent with said specified level of authority.
Claim 5
Dependent Claim
42 words
The method of providing variable authority level user access control for a plurality of resource objects within a distributed data processing system according to Claim 4 wherein said plurality of access control profiles each includes an identification of a selected resource object.
Claim 6
Dependent Claim
60 words
The method of providing variable authority level user access control for a plurality of resource objects within a distributed data processing system according to Claim 4 wherein selected ones of said plurality of access control profiles include an identification of a selected group of users and a specified level of authority associated with each of said selected group of users.
Claim 7
Dependent Claim
51 words
The method of providing variable authority level user access control for a plurality of resource objects within a distributed data processing system according to Claim 4 wherein said specified level of authority associated with said selected user includes an indication of whether said selected user may alter said particular resource object.
Claim 8
Dependent Claim
51 words
The method of providing variable authority level user access control for a plurality of resource objects within a distributed data processing system according to Claim 4 wherein said specified level of authority associated with said selected user includes an indication of whether said selected user may view said particular resource object.
Claim 9
Dependent Claim
62 words
The method of providing variable authority level user access control for a plurality of resource objects within a distributed data processing system according to Claim 4 wherein said step of determining the access intent of said selected user comprises the step of requiring said selected user to input said access intent in conjunction with an attempted access of a particular resource object.