Patent ID: 8468579
Filing Date: 2013-06-18
Classification: H04L

Abstract:
1. A computer system comprising at least one processor that facilitates group management for use access control, the computer system comprising: at least one computer-readable storage medium comprising a plurality of computer-executable instructions that, responsive to execution by the at least one processor, implement a plurality of components comprising: a transform component configured to transform access control list information comprising a plurality of entries arranged in an order into a set of order independent certificates that are independent of the order, and grant access rights to at least one resource, wherein: the transform component is configured to transform at least one entry from the plurality of entries that indicates at least one first group into an order independent certificate from the set of the order independent certificates by evaluating entries in the access control list information that precede the at least one entry, and the order independent certificate is generated for at least one second group that is represented using the at least one first group in accordance with a result of the evaluation of the entries in the access control list information that precede the at least one entry; a certificate component configured to issue the set of certificates; and a group component that configured to manipulate one or more groups specified in the access control list information to produce order-independent logic as a function of an access control policy.