Patent ID: 9607166
Date: 2017-03-28
CPC Classifications: G06F,H04L,H04W

Claim:
1. On a computing device, a method for managing security policy for a collection of digital resources with respect to a collection of principals, the method comprising: receiving, via a processor of the computing device, identification information regarding an owner of one or more principal groups, one or more resource sets, and one or more policy rules, the policy rules regarding access to the resource sets by the principal groups, each principal group comprising one or more principals and each resource set comprising one or more digital resources; authenticating, via a security token service, the owner using the identification information, the security token service being located remotely from the computing device; receiving, via the processor of the computing device, a request to write to a selected resource set of the one or more resource sets; obtaining, via the authorization data information store, authorization to write to the selected resource set, the authorization data information store having a lower security level than the security token service; sending, via the processor of the computing device, a command to write to the selected resource set to a remote storage service through which the selected resource set is accessible and providing to the remote storage service the authorization to write to the selected resource set with the command; receiving, via the processor of the computing device, a request to write to a selected policy rule of the one or more policy rules associated with one or more of the resource sets; obtaining, via the processor of the computing device, authorization to write to the selected policy rule; and sending, via the processor of the computing device, a command to write to the selected policy rule to the remote storage service and providing to the remote storage service the authorization to write to the selected policy rule.