Patent ID: 7856654

Claim:
A computer implemented method for network permissions evaluation, comprising: storing a plurality of security rules in a storage device coupled to a security server, wherein the plurality of security rules include one or more static rules; compiling, on the security server, the one or more static rules into native code; receiving, at the security server, a request for permission to access a resource, wherein the request includes code evidence for an application executing on a client machine, and wherein the application executes on the client machine under a virtual machine having a security manager that delegates evaluating the request for the permission to the security server; evaluating the request for the permission on the security server, wherein evaluating the request includes executing the native code compiled from the static rules to evaluate the code evidence included in the request and determine whether the application executing on the client machine has the permission to access the resource associated with the request; forwarding a result of the security server evaluating the request for the permission to the client machine, wherein the security manager associated with the virtual machine locally enforces the result forwarded from the security server on the client machine; and caching the result of the security server evaluating the request for the permission, wherein caching the result includes one or more of: including a time stamp in the result forwarded from the security server to the client machine, wherein the client machine caches the result forwarded from the security server for a predetermined time interval according to the time stamp included in the result; or the security server caching the result for a policy defined time interval, wherein the cached result remains valid for subsequent requests for the permission received at the security server during the policy defined time interval.