Patent ID: 8677453
Filing Date: 2014-03-18
Classification: G06F,H04L

Abstract:
1. A method comprising: at an application service appliance device, receiving a request from a client device to access an application server; extracting from the request a plurality of attributes comprising a user attribute identifying a user of the client device and an environment attribute identifying an environment associated with the user; performing a plurality of individual searches concurrently, one for each of the attributes, in order to generate a plurality of individual search results, for one or more policies in a policy store to determine whether the policies, when compared to a corresponding one of the attributes, indicate that the client device is authorized to access the application server, wherein each of the policies is grouped into one or more policy sets and each policy has a plurality of child rules, and wherein a combining algorithm of each of the policies specifies that when one of the child rules produces an evaluation result, a corresponding policy also produces a same evaluation result without having to further evaluate the request; combining the plurality of individual search results associated with the attributes; generating a single final result from the combining; determining whether the client device is eligible to access the application server based on the single final result; and performing an open system interconnection (OSI) layer-7 access control process on packets of the request from the client device.