Patent ID: 8555378
Filing Date: 2013-10-08
Classification: G06F,H04L

Abstract:
1. A computer-implemented method, comprising: accessing a resource object having an identifier, wherein the resource object has multiple associations with other objects; receiving a first request to provide a first requesting entity with a first indicated type of access to the resource object; searching an authorization cache index using the identifier, wherein searching includes determining whether an authorization cache entry for the resource object exists; generating, on a computing device, a new authorization cache entry for the resource object, wherein generating a new authorization cache entry includes: determining whether the new authorization cache entry grants or denies the first indicated type of access to the first requesting entity; providing the first indicated type of access to the first requesting entity based on determining that the new authorization cache entry grants the first indicated type of access to the first requesting entity; subsequent to providing the first indicated type of access, receiving a second request to provide a second requesting entity with a second indicated type of access to the resource object; determining that the new authorization cache entry neither grants nor denies the second indicated type of access to the second requesting entity; and in response to determining that the new authorization cache entry neither grants nor denies the second indicated type of access, accessing a cache entry for a parent object of the resource object.