US6917975B2
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method for role and resource policy management
Assignee: Oracle International Corp
•
Filing: 2003-02-14
•
Granted: 2005-07-12
•
Expires: 2023-02-14
Abstract
Abstract A method for adaptively managing entitlements, comprising the steps of providing for the association of a role with a first resource; and providing for the association of a policy with a second resource, wherein the policy is based at least partially on the role; and providing for hierarchically relating the role and the policy; and wherein the role is hierarchically equal or superior to the policy.
Inventors
- 👤 Philip B. Griffin
- 👤 Manish Devgan
- 👤 Alex Toussaint
- 👤 Rod McCauley
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-06 14:37
CPC Classifications
G; G06; G06F; G06F9/00; G06F9/06; G06F9/46; G06F9/50; Y; Y10; Y10S; Y10S707/00; Y10S707/99931; Y10S707/99939
Claims Analysis
Total Claims: 31
Claim 1
Independent Claim
138 words
A method for managing entitlements in an enterprise application, comprising the steps of: associating a role with a first enterprise application resource; associating a policy with a second enterprise application resource, wherein the policy is based at least partially on the role; mapping the role to a principal in order to determine whether or not the principal can access the second application resource; wherein the first application resource is hierarchically related to the second application resource; wherein the second application resource can inherit one or more roles associated with the first application resource; wherein the role is hierarchically equal or superior to the policy; the role can supersede a second role associated with a parent of the first application resource; and wherein the policy can supersede a second policy associated with a parent of the second application resource.
Claim 2
Independent Claim
138 words
A method for managing entitlements in an enterprise application, comprising the steps of: associating a role with a first enterprise application resource; associating a policy with a second enterprise application resource, wherein the policy is based at least partially on the role; mapping the role to a principal in order to determine whether or not the principal can access the second application resource; wherein the first application resource is hierarchically related to the second application resource; wherein the second application resource can inherit one or more roles associated with the first application resource; wherein the role is hierarchically equal or superior to the policy; the role can supersede a second role associated with a parent of the first application resource; and wherein the policy can supersede a second policy associated with a parent of the second application resource.
Claim 3
Dependent Claim
26 words
The method of claim 1 wherein: the step of associating the policy with the second application resource is initiated by an authenticated user, group or process.
Claim 4
Dependent Claim
27 words
The method of claim 1 wherein the step of mapping the role further comprises: evaluating the role to true or false for a principal in a context.
Claim 5
Dependent Claim
27 words
The method of claim 1 wherein: the role is a Boolean expression that can include at least one of (1) another Boolean expression and (2) a predicate.
Claim 6
Dependent Claim
17 words
The method of claim 4 wherein: the predicate is one of a user, group, time and segment.
Claim 7
Dependent Claim
17 words
The method of claim 4 wherein: the predicate can be evaluated against the principal and a context.
Claim 8
Dependent Claim
13 words
The method of claim 4 wherein: the predicate is specified in natural language.
Claim 9
Dependent Claim
20 words
The method of claim 1 wherein: the policy is an association between the second resource and a set of roles.
Claim 10
Independent Claim
110 words
A method for managing entitlements, comprising the steps of: associating a first role with a first resource in a hierarchy of resources; associating a first policy with a second resource in the hierarchy of resources, wherein the first policy is based at least partially on the first role; wherein the second resource in the hierarchy of resources is capable of inheriting at least one role associated with the first resource in the hierarchy of resources; wherein the first role can supersede a second role associated with a parent of the first resource; and wherein the first policy can supersede a second policy associated with a parent of the second resource.
Claim 11
Independent Claim
110 words
A method for managing entitlements, comprising the steps of: associating a first role with a first resource in a hierarchy of resources; associating a first policy with a second resource in the hierarchy of resources, wherein the first policy is based at least partially on the first role; wherein the second resource in the hierarchy of resources is capable of inheriting at least one role associated with the first resource in the hierarchy of resources; wherein the first role can supersede a second role associated with a parent of the first resource; and wherein the first policy can supersede a second policy associated with a parent of the second resource.
Claim 12
Dependent Claim
26 words
The method of claim 9 wherein: the step of associating the first policy with the second resource is initiated by an authenticated user, group or process.
Claim 13
Dependent Claim
30 words
The method of claim 9 including the step of: mapping the first role to a principal in order to determine whether or not the principal can access the second resource.
Claim 14
Dependent Claim
23 words
The method of claim 9 including the step of: evaluating the first role to true or false for a principal in a context.
Claim 15
Dependent Claim
28 words
The method of claim 9 wherein: the first role is a Boolean expression that can include at least one of (1) another Boolean expression and (2) a predicate.
Claim 16
Dependent Claim
17 words
The method of claim 13 wherein: the predicate is one of a user, group, time and segment.
Claim 17
Dependent Claim
17 words
The method of claim 13 wherein: the predicate can be evaluated against a principal and a context.
Claim 18
Dependent Claim
13 words
The method of claim 15 wherein: the predicate is specified in natural language.
Claim 19
Dependent Claim
21 words
The method of claim 9 wherein: the first policy is an association between the second resource and a set of roles.
Claim 20
Dependent Claim
19 words
The method of claim 9 wherein: the first resource and the second resource are part of an enterprise application.
Claim 21
Independent Claim
118 words
A method for managing entitlements, comprising the steps of: associating a role with a first resource in a hierarchy of resources; associating a policy with a second resource in the hierarchy of resources, wherein the policy is based at least partially on the role; and wherein the second resource in the hierarchy of resources is capable of inheriting at least one role associated with the first resource in the hierarchy of resources; wherein the second resource in the hierarchy of resources is capable of inheriting at least one policy associated with the first resource in the hierarchy of resources; wherein the role can block a less local role; and wherein the policy can block a less local policy.
Claim 22
Independent Claim
118 words
A method for managing entitlements, comprising the steps of: associating a role with a first resource in a hierarchy of resources; associating a policy with a second resource in the hierarchy of resources, wherein the policy is based at least partially on the role; and wherein the second resource in the hierarchy of resources is capable of inheriting at least one role associated with the first resource in the hierarchy of resources; wherein the second resource in the hierarchy of resources is capable of inheriting at least one policy associated with the first resource in the hierarchy of resources; wherein the role can block a less local role; and wherein the policy can block a less local policy.
Claim 23
Dependent Claim
25 words
The method of claim 19 wherein: the step of associating the policy with the second resource is initiated by an authenticated user, group or process.
Claim 24
Dependent Claim
29 words
The method of claim 19 including the step of: mapping the role to a principal in order to specify whether or not the principal can access the second resource.
Claim 25
Dependent Claim
22 words
The method of claim 19 including the step of: evaluating the role to true or false for a principal in a context.
Claim 26
Dependent Claim
27 words
The method of claim 19 wherein: the role is a Boolean expression that can include at least one of (1) another Boolean expression and (2) a predicate.
Claim 27
Dependent Claim
17 words
The method of claim 23 wherein: the predicate is one of a user, group, time and segment.
Claim 28
Dependent Claim
17 words
The method of claim 23 wherein: the predicate can be evaluated against a principal and a context.
Claim 29
Dependent Claim
13 words
The method of claim 23 wherein: the predicate is specified in natural language.
Claim 30
Dependent Claim
20 words
The method of claim 19 wherein: the policy is an association between the second resource and a set of roles.
Claim 31
Dependent Claim
19 words
The method of claim 19 wherein: the first resource and the second resource are part of an enterprise application.
References Cited (Backward Citations)
US5369702A
Cited
US5911143A
Cited
US5848396A
Cited
US6029182A
Cited
US6058392A
Cited
US6023765A
Cited
US6241608B1
Cited
US6226745B1
Cited
US6434607B1
Cited
US6014666A
Cited
US6157924A
Cited
US6182226B1
Cited
US6285985B1
Cited
US6161139A
Cited
US6141010A
Cited
US6539375B2
Cited
US6460141B1
Cited
US6571247B1
Cited
US6308163B1
Cited
US6269393B1
Cited
US6260050B1
Cited
US6587849B1
Cited
US20040019650A1
Cited
US6754672B1
Cited
US20040024812A1
Cited
US20020069261A1
Cited
US20020124053A1
Cited
US20020107913A1
Cited
US20020111998A1
Cited
US20020173971A1
Cited
US20030078972A1
Cited
US20030065721A1
Cited
US20030131113A1
Cited
US20030187956A1
Cited
US20030229623A1
Cited
US20040003071A1
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2008-07-11 | 2009-01-10 | 2009-07-12 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2012-07-11 | 2013-01-10 | 2013-07-12 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2016-07-11 | 2017-01-10 | 2017-07-12 | $7700.00 | Window Closed / Lapsed |