Patent ID: 6408336
Filing Date: 2002-06-18
Classification: H04L

Abstract:
An access filter that administers objects including a plurality of information resources and controls access by a user to an information resource of the plurality, the access filter comprising:access control information including at least one object that specifies an explicitly-defined set of users, at least one object that specifies an explicitly-defined set of information resources, at least one object that specifies an explicitly-defined access policy, the access policy defining access by a defined set of users to a defined set of information resources, and at least one object that specifies an explicitly-defined administrative policy the administrative policy defining administrative access by a defined set of users to an object; and an access checker that responds to a request by a user to access a resource or to administer an object by determining from the access control information whether the requesting user may access the requested resource or administer the requested object, the access checker being one of a plurality thereof in a network, having a local copy of the access control information, and employing the local copy to check access.