Patent ID: 8887296

Claim:
A method for administering object-based multi-level security in a service oriented architecture; the method comprising: defining a plurality of multi-level attributes for each of selected life-cycle states of a plurality of life-cycle states of a service object, wherein the plurality of multi-level attributes include a first program attribute related to a security clearance level, a second program attribute related to an operating parameter, and a third program attribute related to a security key; receiving a request from a requestor for said service object; determining permitted actions for said service object based upon said plurality of multi-level attributes, and based upon at least one life-cycle state of said plurality of life-cycle states of said service object, wherein security aspects of a host machine are reconfigured when the permitted actions do not comply with the received request such that the permitted actions comply with the received request; authenticating the received request based upon said determining of permitted actions; and generating a quality of service security contract having associated access identifiers enabling the requestor to effect access to the service object.