Patent ID: 9185090
Filing Date: 2015-11-10
Classification: G06F,H04L

Abstract:
1. A method of authorizing a request in a plurality of requests, comprising: receiving a plurality of XACML policies, each of at least some of the plurality of XACML policies corresponding to a different pair of a single degree of variation of a plurality of entities that may correspond to the plurality of requests and a set of at least one resource, each of the plurality of XACML policies specifying at least a location of at least one of a group comprising at least one resource and at least one subject; receiving a correlation of each of a plurality of requests to at least one of the plurality of XACML policies; receiving the request comprising at least one of a group comprising at least one resource and at least one subject; identifying at least one of the plurality of XACML policies correlated to the request; retrieving an action and information useful for locating at least one resource from the at least one of the plurality of XACML policies identified; extracting from the request received at least one identifier of at least one subject; extracting from the request received at least one identifier of at least one resource using the information retrieved; building an XACML context request responsive to the action retrieved, and the at least one identifier of the at least one subject and the at least one identifier of the resource extracted; submitting the XACML context request built to obtain an authorization decision to perform the action on the at least one resource; obtaining the authorization decision; and performing the action on the at least one resource responsive to the authorization decision obtained.