Patent ID: 9485100
Filing Date: 2016-11-01
CPC Classification: G06F,H04L

Claim Text:
1. A trust management method performed by a computer system comprising a processor and a non-transitory computer-readable storage medium storing instructions that when executed by the processor, cause the processor to perform the method, the method comprising: receiving a request for use of a computing resource; obtaining a group of certificates expressing a plurality of authorizations, each certificate of the group of certificates expressing at least one authorization of the plurality of authorizations by at least one principal; constructing a dependency graph based on the group of certificates, the dependency graph comprising a plurality of nodes and at least one connection between at least two nodes of the plurality of nodes, the at least one connection being associated with an authorization of the plurality of authorizations expressed by the group of certificates; computing, based on the dependency graph, a fixpoint of the plurality of authorizations expressed by the group of certificates, or an approximation thereof; and implementing a trust management decision based on a result of the fixpoint computation, the trust management decision comprising a determination of whether to grant the request for use of the computing resource.