Patent ID: 9311370
Filing Date: 2016-04-12
CPC Classification: G06F

Claim Text:
1. A system for virtual attribute federation, the system comprising: a processing unit; a memory with cache operably associated with the processing unit; random access memory operably associated with the processing unit; and a virtual attribute federation manager (VAFM) for federating a same instance of a virtual attribute across each of a plurality of virtual attribute enabled directories (VAEDs), wherein at least one of the VAEDs is in a different domain and has a different directory structure than at least one other of the VAEDs, by mapping, for the virtual attribute according to a given value calculation method, a federated instance external to the VAEDs to a local instance internal to the VAEDs, wherein the VAFM signs the virtual attribute and value calculation method with a digital signature, wherein each VAED is configured to execute the virtual attribute and value calculation method in response to a recognition by the VAED of the signature of the virtual attribute and value calculation method, and wherein the value calculation method is executed in a restricted environment where the value calculation method retrieves information through an attribute store of the VAED and a set of external ports according to a resource map, the restricted environment being abstracted by the resource map and external ports and the restricted environment preventing the value calculation method from transmitting information outside of the VAED, reading information outside of the VAED except through the set of external ports, changing information in the attribute store, and accessing information that an executing user identity does not have access to from outside the VAED.