Patent ID: 8789132
Filing Date: 2014-07-22
Classification: G06F

Abstract:
1. A non-transitory computer-readable medium having instructions stored thereon that, when executed by a processor, cause the processor to implement an authorization policy, the implementing comprising: modeling an authorization policy set comprising one or more authorization policies; storing the authorization policy set in a policy store; retrieving from an application an input of the application, wherein the input of the application comprises at least one of a subject, a resource, or an action; applying the stored authorization policy set to the input of an application to generate an authorization decision set independent of the application using an application programming interface of the policy store, wherein the authorization decision set comprises one or more authorization decisions; storing the authorization decision set in a decision table; propagating the stored authorization decision set to the application using a user provisioning system; modifying the authorization policy set; and applying the modified authorization policy set to the input to regenerate the authorization decision set.