Patent ID: 7013485
Filing Date: 2006-03-14
Classification: G06F,H04L

Abstract:
1. A security system for a computer system, comprising: a plurality of assets within the computer system; a plurality of members registered to use the computer system; a plurality of groups, each group comprising at least two of the plurality of members; a plurality of roles defining user rights to access one or more of the plurality of assets, each member and each group associated with at least one role; a plurality of access control lists each corresponding to an asset and defining at least one privilege for accessing the asset corresponding to the privilege, according to a member's role; and at least one domain being an administrative and access control boundary around a plurality of security entities, the security entities of the at least one domain comprising: each privilege defined in the access control lists of the at least one domain identifying one or more roles in the domain that may access the asset corresponding to the privilege; the security system operable to authorize a particular member to perform a requested operation with respect to a requested asset within the domain when the particular member is associated with a role, in the domain, corresponding to a privilege for the requested asset.