US6154741A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Entitlement management and access control system
Assignee: Oracle International Corp
•
Filing: 1999-04-08
•
Granted: 2000-11-28
•
Expires: 2019-04-08
Abstract
Abstract The invention provides a method, system, and computer program product for determining accessor entitlement to a resource in response to an accessor request for access to the resource. The invention associates a resource with an entitlement expression that includes a reference to at least one membership map having membership information regarding the accessor and associates with the accessor a unique identifier that acts as an index into each membership map. The entitlement expression is evaluated for the resource to determine the entitlement of the requesting accessor to the resource. The evaluation includes looking up the accessor's membership information in at least one membership map using the accessor's unique identifier. The invention may further include at least one accessor group having a name, zero or more accessors that are members of the group, and a membership map for determining whether a particular accessor is a member of the group. The entitlement expression then refers to at least one membership map by including at least one group name in the entitlement expression.
Inventors
- 👤 Daniel J. Feldman
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-29 17:23
CPC Classifications
G; G06; G06F; G06F9/00; G06F9/06; G06F9/46; G06F9/468; Y; Y10; Y10S; Y10S707/00; Y10S707/99931; Y10S707/99933; Y10S707/99939; Y10S707/99941; Y10S707/99943
Claims Analysis
Total Claims: 43
Claim 1
Independent Claim
132 words
In a system having a plurality of accessors and at least one resource, a method for determining accessor entitlement to a resource in response to an accessor request for access to the resource, comprising the steps of: a) associating with the resource an entitlement expression, the entitlement expression including a reference to at least one membership map having membership information for the accessor, the at least one membership map being a bit map; b) associating with the accessor a unique identifier, the unique identifier acting as an index into each membership map; c) evaluating the entitlement expression for the resource to determine the entitlement of the requesting accessor to the resource, the evaluation including looking up the accessor's membership information in the at least one membership map using the accessor's unique identifier.
Claim 2
Dependent Claim
132 words
In a system having a plurality of accessors and at least one resource, a method for determining accessor entitlement to a resource in response to an accessor request for access to the resource, comprising the steps of: a) associating with the resource an entitlement expression, the entitlement expression including a reference to at least one membership map having membership information for the accessor, the at least one membership map being a bit map; b) associating with the accessor a unique identifier, the unique identifier acting as an index into each membership map; c) evaluating the entitlement expression for the resource to determine the entitlement of the requesting accessor to the resource, the evaluation including looking up the accessor's membership information in the at least one membership map using the accessor's unique identifier.
Claim 3
Dependent Claim
69 words
The method of claim 1, wherein the system further comprises at least one group, each group having a name, zero or more accessors that are members of the group, and a membership map for determining whether a particular accessor is a member of the group, the entitlement expression referencing at least one membership map by including at least one group name corresponding to a group having a membership map.
Claim 4
Dependent Claim
20 words
The method of claim 2, wherein the entitlement expression comprises a plurality of group names and at least one operator.
Claim 5
Dependent Claim
16 words
The method of claim 3, wherein the entitlement expression operator comprises one or more boolean operators.
Claim 6
Dependent Claim
41 words
The method of claim 1, wherein the accessor's unique identifier is an index to a position in each bit map wherein the bit at that position indicates whether the accessor is a member of the group corresponding to the bit map.
Claim 7
Dependent Claim
17 words
The method of claim 1, wherein the bit map includes at least one bit for each accessor.
Claim 8
Dependent Claim
15 words
The method of claim 1, wherein the bit maps are stored in paged data structures.
Claim 9
Dependent Claim
138 words
In a system having a plurality of accessors, at least one group having a name and having zero or more accessors as members, and at least one resource, a method for determining accessor entitlement to a resource in response to an accessor request for access to the resource, comprising the steps of: a) associating with the resource an entitlement expression including at least one group name; b) associating with each group a membership map indicating whether particular accessors are members of that group, the membership map being a bit map; c) associating with each accessor a unique identifier usable as an index into each group membership map to determine whether that accessor is a member of that group; d) evaluating an entitlement expression for the resource to determine the entitlement of the requesting accessor to the requested resource.
Claim 10
Dependent Claim
138 words
In a system having a plurality of accessors, at least one group having a name and having zero or more accessors as members, and at least one resource, a method for determining accessor entitlement to a resource in response to an accessor request for access to the resource, comprising the steps of: a) associating with the resource an entitlement expression including at least one group name; b) associating with each group a membership map indicating whether particular accessors are members of that group, the membership map being a bit map; c) associating with each accessor a unique identifier usable as an index into each group membership map to determine whether that accessor is a member of that group; d) evaluating an entitlement expression for the resource to determine the entitlement of the requesting accessor to the requested resource.
Claim 11
Dependent Claim
41 words
The method of claim 8, wherein the accessor's unique identifier is an index to a position in each bit map wherein the bit at that position indicates whether the accessor is a member of the group corresponding to the bit map.
Claim 12
Dependent Claim
17 words
The method of claim 8, wherein the bit map includes at least one bit for each accessor.
Claim 13
Dependent Claim
15 words
The method of claim 8, wherein the bit maps are stored in paged data structures.
Claim 14
Dependent Claim
27 words
The method of claim 8, wherein each group name is associated with a membership map identifier that represents the location of the membership map for the group.
Claim 15
Dependent Claim
26 words
The method of claim 12, wherein the group names and the membership map identifiers associated with the group names are stored in an accessor group store.
Claim 16
Dependent Claim
13 words
The method of claim 13, wherein the membership map identifier is a number.
Claim 17
Dependent Claim
39 words
The method of claim 14, wherein an accessor group store bit map tracks which membership map identifier numbers are associated with group names and which member ship map identifier numbers are available for association with a new group name.
Claim 18
Dependent Claim
25 words
The method of claim 8, wherein each accessor has a unique name and each accessor's name and unique identifier are stored in an accessor store.
Claim 19
Dependent Claim
12 words
The method of claim 16, wherein the accessor identifier is a number.
Claim 20
Dependent Claim
31 words
The method of claim 17, wherein an accessor store bit map tracks which identifier numbers are associated with accessors and which identifier numbers are available for association with a new accessor.
Claim 21
Independent Claim
129 words
A system for determining accessor entitlement to a resource comprising: a) a first means for storing a plurality of accessors and a unique identifier associated with each accessor; b) a second means for storing a plurality of unique accessor group names, each of the plurality of accessor group names having an associated membership map, the accessor identifier acting as an index into the accessor group membership maps for determining whether an accessor is a member of an accessor group, the membership maps being bit maps; and c) a processor means for determining whether an accessor is entitled to a resource in response to an accessor request for the resource by evaluating an entitlement expression for the resource, the entitlement expression including a reference to at least one accessor group.
Claim 22
Independent Claim
129 words
A system for determining accessor entitlement to a resource comprising: a) a first means for storing a plurality of accessors and a unique identifier associated with each accessor; b) a second means for storing a plurality of unique accessor group names, each of the plurality of accessor group names having an associated membership map, the accessor identifier acting as an index into the accessor group membership maps for determining whether an accessor is a member of an accessor group, the membership maps being bit maps; and c) a processor means for determining whether an accessor is entitled to a resource in response to an accessor request for the resource by evaluating an entitlement expression for the resource, the entitlement expression including a reference to at least one accessor group.
Claim 23
Dependent Claim
31 words
The system of claim 19, further comprising a third means for storing at least one unique resource name corresponding to a resource and an entitlement expression associated with each resource name.
Claim 24
Dependent Claim
28 words
The system of claim 19, wherein the processor means comprises a server process responsive to one or more client processes representing accessor requests for access to a resource.
Claim 25
Dependent Claim
42 words
The system of claim 21, wherein the processor means comprises a plurality of threads executing on a server computer for accessing the first and second means and for evaluating accessor entitlement requests based on information retrieved from the first and second means.
Claim 26
Dependent Claim
154 words
In a system having a plurality of accessors and at least one resource, a computer program product comprising a computer useable medium having computer readable program code to direct the system to perform a method for determining accessor entitlement to a resource in response to an accessor request for access to the resource comprising at least the following steps: a) associating with the resource an entitlement expression, the entitlement expression including a reference to at least one membership map having membership information for the accessory, the at least one membership map being a bit map; b) associating with the accessor a unique identifier, the unique identifier acting as an index into each membership map; c) evaluating the entitlement expression for the resource to determine the entitlement of the requesting accessor to the resource, the evaluation including looking up the accessor's membership information in the at least one membership map using the accessor's unique identifier.
Claim 27
Dependent Claim
154 words
In a system having a plurality of accessors and at least one resource, a computer program product comprising a computer useable medium having computer readable program code to direct the system to perform a method for determining accessor entitlement to a resource in response to an accessor request for access to the resource comprising at least the following steps: a) associating with the resource an entitlement expression, the entitlement expression including a reference to at least one membership map having membership information for the accessory, the at least one membership map being a bit map; b) associating with the accessor a unique identifier, the unique identifier acting as an index into each membership map; c) evaluating the entitlement expression for the resource to determine the entitlement of the requesting accessor to the resource, the evaluation including looking up the accessor's membership information in the at least one membership map using the accessor's unique identifier.
Claim 28
Dependent Claim
71 words
The computer program product of claim 23, wherein the system further comprises at least one group, each group having a name, zero or more accessors that are members of the group, and a membership map for determining whether a particular accessor is a member of the group, the entitlement expression referencing at least one membership map by including at least one group name corresponding to a group having a membership map.
Claim 29
Dependent Claim
22 words
The computer program product of claim 24, wherein the entitlement expression comprises a plurality of group names and at least one operator.
Claim 30
Dependent Claim
18 words
The computer program product of claim 25, wherein the entitlement expression operator comprises one or more boolean operators.
Claim 31
Dependent Claim
43 words
The computer program product of claim 23, wherein the accessor's unique identifier is an index to a position in each bit map wherein the bit at that position indicates whether the accessor is a member of the group corresponding to the bit map.
Claim 32
Dependent Claim
19 words
The computer program product of claim 23, wherein the bit map includes at least one bit for each accessor.
Claim 33
Dependent Claim
17 words
The computer program product of claim 23, wherein the bit maps are stored in paged data structures.
Claim 34
Dependent Claim
153 words
In a system having a plurality of accessors, at least one group having a name and having zero or more accessors as members, and at least one resource, a method for determining accessor entitlement to a resource in response to an accessor request for access to the resource, comprising the steps of: a) associating with the resource an entitlement expression including at least one group name; b) associating with each group a membership map indicating whether particular accessors are members of that group; c) associating with each group name a membership map identifier that represents the location of the membership map for the group; d) associating with each accessor a unique identifier usable as an index into each group membership map to determine whether that accessor is a member of that group; and e) evaluating an entitlement expression for the resource to determine the entitlement of the requesting accessor to the requested resource.
Claim 35
Dependent Claim
153 words
In a system having a plurality of accessors, at least one group having a name and having zero or more accessors as members, and at least one resource, a method for determining accessor entitlement to a resource in response to an accessor request for access to the resource, comprising the steps of: a) associating with the resource an entitlement expression including at least one group name; b) associating with each group a membership map indicating whether particular accessors are members of that group; c) associating with each group name a membership map identifier that represents the location of the membership map for the group; d) associating with each accessor a unique identifier usable as an index into each group membership map to determine whether that accessor is a member of that group; and e) evaluating an entitlement expression for the resource to determine the entitlement of the requesting accessor to the requested resource.
Claim 36
Dependent Claim
26 words
The method of claim 30, wherein the group names and the membership map identifiers associated with the group names are stored in an accessor group store.
Claim 37
Dependent Claim
13 words
The method of claim 31, wherein the membership map identifier is a number.
Claim 38
Dependent Claim
39 words
The method of claim 32, wherein an accessor group store bit map tracks which membership map identifier numbers are associated with group names and which member ship map identifier numbers are available for association with a new group name.
Claim 39
Dependent Claim
148 words
In a system having a plurality of accessors, at least one group having a name and having zero or more accessors as members, and at least one resource, a method for determining accessor entitlement to a resource in response to an accessor request for access to the resource, comprising the steps of: a) associating with the resource an entitlement expression including at least one group name; b) associating with each group a membership map indicating whether particular accessors are members of that group; c) associating with each accessor a unique name and a unique identifier usable as an index into each group membership map to determine whether that accessor is a member of that group, each accessor's name and unique identifier being stored in an accessor store; and d) evaluating an entitlement expression for the resource to determine the entitlement of the requesting accessor to the requested resource.
Claim 40
Dependent Claim
148 words
In a system having a plurality of accessors, at least one group having a name and having zero or more accessors as members, and at least one resource, a method for determining accessor entitlement to a resource in response to an accessor request for access to the resource, comprising the steps of: a) associating with the resource an entitlement expression including at least one group name; b) associating with each group a membership map indicating whether particular accessors are members of that group; c) associating with each accessor a unique name and a unique identifier usable as an index into each group membership map to determine whether that accessor is a member of that group, each accessor's name and unique identifier being stored in an accessor store; and d) evaluating an entitlement expression for the resource to determine the entitlement of the requesting accessor to the requested resource.
Claim 41
Dependent Claim
25 words
The method of claim 34, wherein each accessor has a unique name and each accessor's name and unique identifier are stored in an accessor store.
Claim 42
Dependent Claim
12 words
The method of claim 34, wherein the accessor identifier is a number.
Claim 43
Dependent Claim
31 words
The method of claim 36, wherein an accessor store bit map tracks which identifier numbers are associated with accessors and which identifier numbers are available for association with a new accessor.
References Cited (Backward Citations)
US4606002A
Cited
US5649181A
Cited
US5675771A
Cited
US5696898A
Cited
US5644763A
Cited
US5668987A
Cited
US5809230A
Cited
US5857188A
Cited
US5893107A
Cited
US5889952A
Cited
US5999978A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2003-11-28 | 2004-05-29 | 2004-11-28 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2007-11-28 | 2008-05-29 | 2008-11-28 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2011-11-28 | 2012-05-29 | 2012-11-28 | $7700.00 | Window Closed / Lapsed |