Patent ID: 7555771
Filing Date: 2009-06-30
Classification: G06F,H04L

Abstract:
1. A method of managing access to a resource in a network, comprising: receiving from a particular one of a group of resources in a network an access query generated in response to a user submitting a request to access the particular resource, the access query regarding the particular user's privileges for accessing the particular resource; in response to receiving the access query, using a directory schema stored in a computer-readable medium to determine the particular user's privileges for accessing the particular resource, the directory schema including multiple association objects including a particular association object associated with the particular resource, the particular association object defining associations between one or more user objects representing multiple users, a resource group object representing the group of resources, and one or more privilege objects representing privileges of users for access to each of the group of resources such that the association defines the privileges of each of the multiple users for accessing any of the group of resources, wherein for each user, that user's privileges for accessing any of the group of resources is the same, wherein the one or more user objects, the resource group object, the one or more privilege objects, and the particular association object are all separate objects from each other; wherein determining the particular user's privileges for accessing the particular resource includes: communicating to the particular resource a response to the access query including the determined privileges of the particular user for accessing the particular resource.