Patent ID: 7065784
Filing Date: 2006-06-20
Classification: G06F,H04L

Abstract:
1. In a computer system comprising a server that provides remote access to one or more resources and a security system for controlling access to the one or more resources, a method for enforcing access control to a resource of a computer system at the security system as opposed to enforcing access control at the server, the method comprising the steps of: the server processing a logon request from a remote user; the server producing a security context of the remote user based on the logon request; assigning the security context of the remote user to the server, wherein assigning the security context of the remote user to the server includes changing a previous security context of the server and by replacing the previous security context of the server with the security context of the remote user; and the server accessing the resource on behalf of the remote user with the assigned security context of the remote user, which replaced the previous security context of the server, so that the security system can enforce access control against the remote security context, thereby relieving the server from enforcing access control against the remote user if the server instead were to access the resource with the server's security context.