Patent ID: 7594224
Filing Date: 2009-09-22
Classification: G06F,H04L

Abstract:
1. A system for distributed enterprise security, comprising: a server operable to update information, wherein the information can include one or more of a policy and configuration information; wherein a policy includes at least one of authentication policy, role policy, authorization policy, and auditing policy; wherein configuration information includes at least one of security providers, locations of directory servers, and databases; a plurality of security control managers (SCMs), each executing on a different computer distributed throughout an enterprise, including a first security control manager (SCM), executing on a first computer wherein the first computer includes a computer readable medium and processor operating thereon, operable to accept the information from the server and distribute the information; a plurality of security service modules (SSMs) executing on the first computer, wherein each SSM is operable to accept the information from the first SCM and wherein each SSM is deployed to a component on the first computer and provides security services to the component based on the information; and wherein the information accepted by the SCM is relevant to one or more of the plurality of SSMs.