Patent ID: 8510796
Filing Date: 2013-08-13
Classification: G06F,G06Q

Abstract:
1. A computer controlled method for delegation-based application-to-application access control, the method comprising: receiving, by a service application on a computer, an operation request, from a requesting application; identifying a user of the requesting application based on the operation request, wherein identifying the user involves determining that the operation request is valid for the identified user, and wherein the identified user is a principal of the operation; gaining access to a delegated-rights repository that stores a set of delegated rights, wherein a respective delegated right specifics access-control rights delegated to the service application by an associated user; retrieving a delegated right specific to the identified user from the delegated-rights repository; activating the retrieved delegated right, wherein activating the retrieved delegated right involves accessing, by the service application, a delegated-to principle representing the retrieved delegated right; and allowing the service application to perform the operation on behalf of the identified user based on the retrieved delegated right.