Patent ID: 8458337
Filing Date: 2013-06-04
Classification: G06F,H04L

Abstract:
1. A method of providing role-based access control of a resource by a subject in an access control system comprising the steps of: receiving a request to access a resource by a subject; controlling access to the requested resource by a scoped role-based access control system, wherein the scoped role-based access control system defines a plurality of roles, wherein at least one role is associated with multiple permission sets wherein each permission set associated with a given role is bound to a set of different resources, and wherein a first scope is defined to directly associate a set of one or more subjects with a given resource, wherein multiple subjects having a same role can be assigned access to different resources associated with the same role based on different defined first scopes, and wherein a second scope is defined to associate a set of one or more resources with a given permission set associated with a given role, wherein the defined first and second scopes allow multiple subjects having a same role to have a different set of permissions associated with said same role against different sets of resources associated with the different sets of permissions of said same role, wherein controlling access to the requested resource comprises: wherein controlling access is implemented by a computer.