Patent ID: 8887242

Claim:
A method to provide layered security for interface access control, the method comprising: receiving a connect message in a first server from a client application to access at least one server endpoint; in response to receiving the connect message, opening a session between the at least one server endpoint and the client application if the session is authorized to be opened; receiving a request for a type of access from a plurality of types of access including a first type of access and a second type of access from the client application to open an endpoint to provide the type of access requested to at least one resource; opening a first endpoint dedicated to the first type of access within the open session after determining that the client application is authorized to access the at least one resource via the first endpoint, the first endpoint to provide the first type of access to the at least one resource; opening a second endpoint dedicated to the second type of access within the open session after determining that the client application is authorized to access the at least one resource via the second endpoint, the second endpoint to provide the second type of access to the at least one resource, wherein the first endpoint and the second endpoint are distinct; receiving a request from the client application to assign a selection of the at least one resource to the first and second opened endpoints; assigning the at least one resource to the first and second endpoints; granting the client application access to the at least one resource via the first opened endpoint to provide the first type of access; and granting the client application access to the at least one resource via the second opened endpoint to provide the second type of access requested, wherein the first and second endpoints are accessed concurrently when the client application is authorized access.