Patent ID: 7577986

Claim:
A system for controlling access to a resource residing on a resource server, the system comprising: means for creating a security object in dependence upon user-selected security control data types, the security object comprising security control data and at least one security method, wherein means for creating the security object further comprises: means for storing in the security object a resource identification for the resource; means for storing in the security object an authorization level of access for the resource; means for storing in the security object user-selected security control data types; and means for storing in the security object security control data for each user-selected security control data type; means for deploying the security object on a security server; means for receiving a request for access to the resource, wherein means for receiving a request for access to the resource further comprises: means for receiving the request for access to the resource in a security server from a client device across a network; means for identifying the security object in dependence upon a URI, wherein means for identifying the security object comprises means for identifying the security object in dependence upon a URI that identifies the resource, including means for finding, in dependence upon the URI identifying the resource, an identification of the security object in an access control table; and means for calling the security method; means for receiving security request data; and means for determining access to the resource in dependence upon the security control data and the security request data.