Patent ID: 6256734
Filing Date: 2001-07-03
Classification: G06F,G06Q

Abstract:
A method of compliance checking in a trust-management system, comprising:a) receiving a request r, a policy assertion (.function..sub.0, POLICY(s.sub.0)) associated with the request r, where .function..sub.0 is a credential function and POLICY(s.sub.0) is a credential source, and n-1 credential assertions (.function..sub.1, s.sub.1) , . . . , (.function..sub.n-1, s.sub.n-1), each credential assertion comprising the credential function .function..sub.i and the credential source s.sub.i ;b) initializing an acceptance record set S to {(.LAMBDA., .LAMBDA., R)}, where .LAMBDA. represents an empty portion of the acceptance record set S, and R represents the request r;c) running assertion (.function..sub.i, s.sub.i) on the acceptance set S for each integer i from n-1 to 0 and adding the result of each assertion (.function..sub.i, s.sub.i) to the acceptance record set S;d) repeating step (c) mn times, where m represents a number greater than 1;e) determining if the acceptance record set S includes (0, POLICY, R), andf) determining acceptance or rejection of the request received by the system.