Patent ID: 9325712
Filing Date: 2016-04-26
CPC Classification: G06F,H04L

Claim Text:
1. A computer-performed method for controlling access to a resource in a computer system, the method comprising: within the computer system receiving an internal input/output request to access a resource of the computer system, the request including a first identifier associated with an entity, wherein access to the resource requires a security identifier from a canonical namespace; determining whether or not the first identifier is a member of the canonical namespace containing identifiers used to access resources in the computer system; responsive to determining that the first identifier is a member of the canonical namespace, accessing the resource using the first identifier; responsive to determining that the first identifier is not a member of the canonical namespace, whereby the first identifier is determined to not be an identifier that can be used to directly access the resource, determining whether the first identifier has a mapping to a second identifier that is a member of the canonical namespace, wherein the mapping is stored in an internal database; responsive to determining that the first identifier is not a member of the canonical namespace and does have a mapping to the canonical namespace stored in the internal database, obtaining the second identifier for the entity within the canonical namespace from an entry in the internal database corresponding to the first identifier; responsive to obtaining the second identifier from the entry in the internal database, accessing the resource using the second identifier; responsive to determining that the first identifier is not a member of the canonical namespace, and does not have a mapping to the canonical namespace stored in the internal database, automatically generating a third identifier for the entity within the canonical namespace and storing the third identifier in the internal database for further identification of the entity; and responsive to generating and storing the third identifier, accessing the resource using the third identifier.