Patent ID: 7464400
Filing Date: 2008-12-09
Classification: H04L

Abstract:
1. A method for controlling access to an application in a distributed computer networked environment, the networked environment comprising an application area and a distributed access control facility, comprising the steps of: submitting a user request for access to an application; issuing through the application the request to the distributed access control facility along with pertinent user information; performing a separation of duties check based on a separation of duties matrix which is defined prior to entitlements being made available for access requests so that separation of duty check can be automatically performed and involved in checking cross-entitlements to identify a conflict before the separation of duties matrix can be used for an entitlement request approval process; determining the type of user; seeking separation of duties approval based on type of user; and providing for an override of the separation of duties check if the user failed the separation of duties check.