Patent ID: 9667654
Date: 2017-05-30
CPC Classifications: G06F,H04L

Claim:
1. A non-transitory storage device containing software that, when executed by a processor, causes the processor to: implement a data dictionary that implements an instance of a hierarchical class tree that includes a plurality of class and data objects; receive a portion of a hierarchical class tree comprising client segments from an external system hosting a peer data dictionary instance, said received portion includes class definitions and security profile information that specifies restrictions on use of data objects identified by the received portion and wherein the machine instructions preclude the processor from accessing the data objects without the use of the web security service and without the received hierarchical class tree portion; attach the received portion to the instance of the hierarchical class tree; receive an access request from a web service for a data object identified by the received portion; validate the access request form the web service using the security profile information associated with the requested data object and by performing at least three verifications: a first verification to determine whether the web service is authorized to send the access request, a second verification to determine whether the data object requested is permitted to be requested by the web service, and a third verification to determine whether a web service intended to receive the access request is authorized to receive the access request; and transmit the access request based on successful completion of the first, second, and third verifications.