Patent ID: 9325739
Filing Date: 2016-04-26
CPC Classification: G06F,H04L

Claim Text:
1. A computer implemented method for supporting multiple languages of security policies, the method comprising: providing a graphical user interface configured to receive, from a user, a first representation of a first security policy expressed using a first policy language, the first security policy configured to control access to one or more resources in a distributed computing environment; persisting the first representation of the first security policy in a data store; receiving a request to access the one or more resources in the distributed computing environment; retrieving additional security policies expressed in a second policy language that are applicable to the request; generating a second representation of the first security policy by translating content of the first representation persisted in the data store from the first policy language into the second policy language, the second representation configured to modify a scope of authority of the user granted by the first representation of the first security policy; and evaluating the second representation of the first security policy and the additional security policies both in the second policy language to grant or deny access to the one or more resources in the distributed computing environment.