Patent ID: 7836483

Claim:
A method of implementing access control policies, comprising: receiving a choreography at a server; the server automatically generating access control policies based on the choreography, including: deriving from the choreography a control-flow map having nodes corresponding to control-flow states, and interactions representing changes from one control-flow state to another control-flow state; compiling an enablement plan for each of the nodes; and representing each of the nodes with a respective policy based on the compiling, wherein each respective policy of the nodes comprises at least one of: a respective enablement set of access control policies to be enabled in response to the policy being matched to a request for a type of access to a resource by a subject; and a respective disablement set of access control policies to be disabled in response to the policy being matched to the request; installing the access control policies on an access controller of the server; receiving an initialization message; and enabling an initial policy selected from the access control policies in response to the initialization message.