Patent ID: 8407807
Filing Date: 2013-03-26
Classification: G06F

Abstract:
1. A computer-implemented security system, comprising: a security policy engine component that employs a logic-based security language to process an authorization query, the engine component initiates build of a proof having a goal and subgoals to be resolved to process the query; an assertion provider component that includes assertion providers that process facts to generate and return an assertion to the security policy engine component to resolve a subgoal of the proof, the assertion providers comprise a dynamic assertion provider to process facts of an external source to resolve the subgoal and a hierarchy assertion provider that defines hierarchy types for processing type hierarchies, the hierarchy assertion provider receives a subgoal for permission on a hierarchical child resource and dynamically generates a rule that encodes hierarchy semantics, the engine component processes the hierarchy semantics to search for a proof of an associated hierarchical parent resource to the hierarchical child resource; and a microprocessor that executes computer-executable instructions associated with at least one of the security policy engine component or the assertion provider component.