Patent ID: 6449643
Filing Date: 2002-09-10
Classification: G06F

Abstract:
In a network management system based on common object request broker technology and comprising a graphical user interface (GUI), a plurality of application building blocks (BBs) communicating with said GUI, and element controllers communicating with said BBs, an access control system integral to said network management system comprising:an access control user interface (ACUI); and at each of a plurality of access control building blocks, each of which communicates with said ACUI: a database for storing access control data pertinent to said access control building block including all resources accessible to said access control building block, all functions executable by said access control building block and all users that have the right to use said access control building block, according to a set of privileges for each user; and an access control library for writing and reading said access control data to and from said database for execution of a network operation according to said Set of privileges on request from a user having said set of privileges, wherein said plurality of access control building blocks are distributed throughout a network controlled by said network management system; and wherein each of said plurality of access control building blocks is independently responsible for managing the access control related to its respective resources and functions; and wherein said access control data is stored in said database in the form of a matrix having resource data, function data and user data as dimensions; and wherein when a new resource or function is added to a selected one said plurality of access control building blocks, a matrix slice configurable by the ACUI and representing a default resource or function, is used to establish initial access control.