Patent ID: 7827598
Filing Date: 2010-11-02
Classification: G06F,H04L

Abstract:
1. A computer readable memory device encoded with software for extending and grouping actions and permissions for authorization of a requesting user to access or use a requested protected system resource in a computer system, the software performing steps comprising: providing an access control policy associated with the requested protected system resource containing a permission list of permitted identities and at least one action group tag with associated action indicators; reusing a finite quantity of action indicators among a plurality of action group tags to control a number of unique permissions less than or equal to the product of the quantity of allowable action indicators and a quantity of allowable action group tags; evaluating the permission list according to a specific permission definition associated with the action group tag, the permission definition providing a correlation between members of a set of action indicators; and granting authorization to perform actions on the requested protected system resource to the requesting user if the access control policy permission list includes an appropriate action indicator correlated to an action group tag.