Patent ID: 6182142
Filing Date: 2001-01-30
Classification: G06F,H04L

Abstract:
A method of controlling access to one or more information resources stored on a first server, the method comprising the steps of:receiving information describing a user at the first server;identifying, at a second server coupled to the first server, a subset of the resources that the user is authorized to access, based on one or more roles that are stored in association with user identifying information;communicating information defining the subset to the first server;storing first information defining the sub set, and second information defining the rules, in one or more tokens;communicating the one or more tokens to a client that is associated with the user; andthereafter resolving requests to use the resources at the first server by performing, for each request of said requests to use the resources at the first server, one or more steps that include examining one or more copies of said one or more tokens.