Patent ID: 9401931
Filing Date: 2016-07-26
CPC Classification: G06F,H04L

Claim Text:
1. A method for dynamically associating, by a server, access rights with a resource, the method comprising steps of: (a) receiving, by a server, a request for a resource from a client; (b) generating, by a first component of a policy engine, a dataset responsive to an application of a first policy to the client; (c) transmitting, by the first component of the policy engine to a second component of the policy engine, the dataset; (d) applying, by the second component of the policy engine, a second policy to the dataset to identify a plurality of levels of access rights associated with the resource; (e) requesting, by the server, from the second component of the policy engine, the plurality of levels of access rights to associate with the resource; (f) signing, by the server, the resource with the plurality of levels of access rights via an extensible rights markup language; (g) transmitting, by the server, the resource signed with the plurality of levels of access rights to the client; (h) making, by an application program responsive to receiving from the server the signed resource, an access control decision using the plurality of levels of access rights, the application program executing on the client; and (i) providing, by the application program, restricted access to the resource responsive to the access control decision.