Patent ID: 6023765
Filing Date: 2000-02-08
Classification: G06F

Abstract:
In a lattice-based multi-level security system of the type wherein each object to which access is controlled by said lattice-based multi-level security system is assigned to a compartment and level maintained thereby, and wherein individual subjects are permitted access to specified objects protected by said security system only if the particular subject possesses a clearance level at least equal to that assigned to the object, and if the object is assigned to a compartment authorized for use by the subject, a method of implementing role-based access control, comprising the following steps:defining a collection of roles,mapping each defined role to a set of privileges, each privilege providing access to one or more combinations of compartments and levels within said lattice-based multi-level security system,assigning each subject to one or more of said roles, andat the time a subject requests access to an object,determining whether the subject is assigned to a role having privileges corresponding to the compartment and level of the requested object within said lattice-based multi-level security system, andemploying said lattice-based multi-level security system to control access of the subject to the object in response to said determination.