Patent ID: 8955052
Filing Date: 2015-02-10
Classification: G06F,H04L

Abstract:
1. A computer-implemented method for managing access to resources in an information processing system, comprising: initiating an application thread comprising a resource authorization attribute, wherein the application thread is initiated on an application server comprising a server identity; receiving a request from an authenticated client to execute the application thread, wherein the authenticated client comprises a client identity; executing the application thread, wherein the server identity and the client identity are associated with the application thread; and authorizing access to resources used to execute the application thread, wherein the use of the server identity and the client identity for the access authorization is determined by the resource authorization attribute; and wherein execution of the application thread spawns a client worker thread associated with the client identity, wherein the client worker thread is mapped to the server identity associated with the application thread; and wherein the client identity is stored in a client identity security context and the server identity is stored in a server identity security context, the client identity security context comprising a client identity Accessor Environment Element (ACEE), the server identity security context comprising a server identity ACEE, the client identity ACEE being indexed by a client identity key, the client identity key being derived from the client identity, the server identity ACEE being indexed by a server identity key, the server identity key being derived from the server identity.