US5999978A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Distributed system and method for controlling access to network resources and event notifications
Assignee: Oracle America Inc
•
Filing: 1997-10-31
•
Granted: 1999-12-07
•
Expires: 2017-10-31
Abstract
Abstract An access control database defines access rights through the use of access control objects. The access control objects include group objects, each defining a group and a set of users who are members of the group, and rule objects. A first subset of the rule objects each specify a set of the group objects, a set of the management objects, and access rights by the users who are members of the groups defined by the specified set of the group objects to the specified set of management objects. The access control server responds to the access requests from the users by granting, denying and partially granting and denying the access requested in each access request in accordance with the access rights specified in the access control database. A second subset of the rule objects in the access control database each specify user access rights to event notifications generated by the specified set of management objects. An event registry is used for registering event notification requests by users, each event notification request specifying event notifications from specified sets of the management objects that are being requested. An event router receives event notifications generated by the management objects. It responds to each event notification by sending corresponding event notification messages to users who have registered a corresponding event notification request with the event registry and also have access rights to the received event notification in accordance with the access rights specified in the access control database.
Inventors
- 👤 Rajeev Angal
- 👤 Sai V.S. Allavarpu
- 👤 Shivaram Bhat
- 👤 Bart Lee Fisher
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-29 12:01
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/10; H04L63/105; G; G06; G06F; G06F21/00; G06F21/30; G06F21/305; G06F21/60; G06F21/604; G06F21/62; G06F21/6218; H04L41/00; H04L41/28; G06F12/00; G06F12/14; G06F12/1458; G06F12/1483; G06F2221/00; G06F2221/21; G06F2221/2101; G06F2221/2141; G06F2221/2145; Y; Y10; Y10S; Y10S707/00; Y10S707/99931; Y10S707/99939
Claims Analysis
Total Claims: 8
Claim 1
Independent Claim
292 words
An access control system for controlling access to management objects in a distributed network, comprising: an access control database, including access control objects, the access control objects including: group objects, each defining a group and a set of users who are members of the group; and rule objects, a first subset of the rule objects each specifying: a set of the group objects, a set of the management objects, and access rights by the users who are members of the groups defined by the specified set of the group objects to the specified set of management objects; and a second subset of the rule objects in the access control database each specify: a set of the group objects, a set of the management objects, and access rights by the users who are members of the groups defined by the specified set of the group objects to event notifications generated by the specified set of management objects; and an event router that receives event notifications generated by the management objects and sends corresponding event notification messages only to users in groups who have access rights to those event notifications in accordance with the access rights specified in the access control database; and at least one access control server that receives access requests from users and controls access to the management objects in accordance with the access rights specified in the access control database; a subset of the access requests specifying operations to be performed on specified sets of the management objects; the at least one access control server responding to the access requests from the users by granting, denying and partially granting and denying the access requested in each access request in accordance with the access rights specified in the access control database.
Claim 2
Dependent Claim
292 words
An access control system for controlling access to management objects in a distributed network, comprising: an access control database, including access control objects, the access control objects including: group objects, each defining a group and a set of users who are members of the group; and rule objects, a first subset of the rule objects each specifying: a set of the group objects, a set of the management objects, and access rights by the users who are members of the groups defined by the specified set of the group objects to the specified set of management objects; and a second subset of the rule objects in the access control database each specify: a set of the group objects, a set of the management objects, and access rights by the users who are members of the groups defined by the specified set of the group objects to event notifications generated by the specified set of management objects; and an event router that receives event notifications generated by the management objects and sends corresponding event notification messages only to users in groups who have access rights to those event notifications in accordance with the access rights specified in the access control database; and at least one access control server that receives access requests from users and controls access to the management objects in accordance with the access rights specified in the access control database; a subset of the access requests specifying operations to be performed on specified sets of the management objects; the at least one access control server responding to the access requests from the users by granting, denying and partially granting and denying the access requested in each access request in accordance with the access rights specified in the access control database.
Claim 3
Dependent Claim
22 words
The access control system of claim 1, wherein the first and second subsets of rule objects are at least partially overlapping subsets.
Claim 4
Dependent Claim
96 words
The access control system of claim 1, wherein the access control system includes an event registry for registering event notification requests by users, each event notification request specifying event notifications from specified sets of the management objects that are being requested; and the event router includes means for sending, in response to each received event notification, corresponding event notification messages to users who have registered a corresponding event notification request with the event registry and also have access rights to the received event notification in accordance with the access rights specified in the access control database.
Claim 5
Independent Claim
247 words
A method of controlling access to management objects in a distributed network, comprising the steps of: storing a set of access control objects, including: group objects, each defining a group and a set of users who are members of the group; and rule objects, a first subset of the rule objects each specifying: a set of the group objects, a set of the management objects, and access rights by the users who are members of the groups defined by the specified set of the group objects to the specified set of management objects; and a second subset of the rule objects in the access control database each specify: a set of the group objects, a set of the management objects, and access rights by the users who are members of the groups defined by the specified set of the group objects to event notifications generated by the specified set of management objects; and receiving event notifications generated by the management objects and sending corresponding event notification messages only to users in groups who have access rights to those event notifications in accordance with the access rights specified in the access control database; and receiving access requests from users, a subset of the access requests specifying operations to be performed on specified sets of the management objects, and responding to the access requests by granting, denying and partially granting and denying access to the management objects in accordance with the access rights specified in the access control database.
Claim 6
Independent Claim
247 words
A method of controlling access to management objects in a distributed network, comprising the steps of: storing a set of access control objects, including: group objects, each defining a group and a set of users who are members of the group; and rule objects, a first subset of the rule objects each specifying: a set of the group objects, a set of the management objects, and access rights by the users who are members of the groups defined by the specified set of the group objects to the specified set of management objects; and a second subset of the rule objects in the access control database each specify: a set of the group objects, a set of the management objects, and access rights by the users who are members of the groups defined by the specified set of the group objects to event notifications generated by the specified set of management objects; and receiving event notifications generated by the management objects and sending corresponding event notification messages only to users in groups who have access rights to those event notifications in accordance with the access rights specified in the access control database; and receiving access requests from users, a subset of the access requests specifying operations to be performed on specified sets of the management objects, and responding to the access requests by granting, denying and partially granting and denying access to the management objects in accordance with the access rights specified in the access control database.
Claim 7
Dependent Claim
22 words
The access control method of claim 4, wherein the first and second subsets of rule objects are at least partially overlapping subsets.
Claim 8
Dependent Claim
96 words
The access control method of claim 4, wherein the method includes registering, at an event registry, event notification requests by users, each event notification request specifying event notifications from specified sets of the management objects that are being requested; and the step of sending event notification messages includes sending, in response to each received event notification, corresponding event notification messages to users who have registered a corresponding event notification request with the event registry and also have access rights to the received event notification in accordance with the access rights specified in the access control database.
References Cited (Backward Citations)
US5367635A
Cited
JPH0736756A
Cited
JPH07248957A
Cited
US5509123A
Cited
US5651006A
Cited
US5675782A
Cited
US5696898A
Cited
US5826268A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2002-12-06 | 2003-06-07 | 2003-12-07 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2006-12-06 | 2007-06-07 | 2007-12-07 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2010-12-06 | 2011-06-07 | 2011-12-07 | $7700.00 | Window Closed / Lapsed |