Importance

Loading Importance Indicators...

Abstract

A method and system are provided for controlling a client's access to a protected element, in which the protected element is contained in a protected resource which includes a data manager. The invention provides efficient access control for existing data elements while requiring only minimal changes to existing software components. In response to a request for access to the protected element the data manager sends an authorization checking request to a protecting resource. The protecting resource, which is in a distributed arrangement with the protected resource, determines, based on an access control element which can be associated with one or more protected elements, whether the client has permission to be provided the requested access to the protected element. It then sends an access control message (e.g. YES/NO) to the data manager based on the determination, and optionally send explanatory information if access is denied. Access to the protected element is provided or denied based on that message. The protected element can be a file, a data block within a database, an object, method or object-method in an object-oriented system.

Loading the Abstract Image...

First Claim