Patent ID: 11961011
Assignee: nan
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G

Claim 72:
73. A method for securing resources in a computing system through entity aggregation, the method comprising:
configuring an aggregation covenant with an aggregation-specific set of computing environment capabilities;
accessing a set of access and privilege information that is indicative of entity-specific computing environment capabilities for an entity in a plurality of entities including a user-type entity or user aggregation, a data-type entity or data aggregation, and a process-type entity or process aggregation, wherein at least one capability in the aggregation-specific set corresponds to at least one of the entity-specific computing environment capabilities;
configuring, by executing an aggregation rule configuration module on at least one processor, at least one rule by which entities of the plurality of entities are aggregated as members of an aggregation associated with the aggregation covenant;
aggregating, by executing an aggregation configuration module on at least one processor, an instance of at least one of the plurality of entities as a member of the aggregation based on the at least one rule, wherein each member of the aggregation is bound by a combination of capabilities including capabilities of the aggregation-specific set of capabilities and by the entity-specific capabilities for which there are no corresponding capabilities in the aggregation-specific set of capabilities; and
securing a computing system resource with the at least one processor by performing at least one computer security action that overrides at least one of the entity-specific computing environment capabilities with at least one corresponding capability in the aggregation-specific set of capabilities.