Patent ID: 8201215
Filing Date: 2012-06-12
Classification: G06F

Abstract:
1. A method for implementing a security policy assertion language (SecPAL) on a computing device, the method comprising: specifying, by the computing device, a resource that is to be a target for a delegation; specifying a delegator principal for transferring a right associated with the resource; specifying a delegatee principal for receiving the right; specifying a verb phrase to represent the right; and formulating by the computing device a delegation authority assertion using the SecPAL to delegate the right from the delegator principal to the delegatee principal, wherein the delegation authority assertion is an English-language sentence in a form of: wherein at least one of the facts 1 . . . n includes an expression and the verb phrase, wherein the verb phrase comprises one of: a) a predicate portion and an expression portion, b) a can assert portion and a fact portion, or c) an alias portion and an expression portion, wherein “f”, “m”, and “n” are integers, and wherein “c” represents a constraint; combining the delegation authority assertion and a delegation granting assertion into an assertion context, wherein the delegation granting assertion includes the resource, the verb phrase, and the delegatee principal; and evaluating an authorization query in conjunction with the assertion context to determine an authorization decision for the resource.