Patent ID: 7886342
Filing Date: 2011-02-08
Classification: H04L

Abstract:
1. A distributed control access facility which comprises: an application interface connected to an application for which access is controlled, to which remote networked users can obtain access and from which authorization requests for the user can be issued; at least one server comprising an access control facility connected to the application server the access control facility comprising: a master setup which provides information, by a processor, to the control facility relating to the application and entitlements, wherein the entitlements comprise a separation of duties check and entitlement types, and the master setup comprises a separation of duties matrix which is defined prior to the entitlement being made available for access requests so that separation of duty check can be automatically performed and involved in checking cross-entitlements to identify a conflict prior to the entitlements being made available for an entitlement request approval process; a request for access facility which receives the user request through a user interface, compares user information, to the information in the master setup to determine whether the request should be approved; and an access repository which acts on the information from the access facility and returns the appropriate authorization to the application.