Patent ID: 8161521

Claim:
A device comprising: a processor to: access a role policy database that includes one or more records; access a super policy database that includes one or more records, where each of the one or more records includes a condition field and an action field, where each condition field specifies information based on the one or more records in the role policy database; receive a message that indicates whether one or more conditions associated with at least one record in the super policy database is satisfied, where each of the one or more conditions is satisfied when a security zone in a private network is accessed by a user associated with one of the one or more records in the role policy database; determine, by examining one or more messages associated with the condition field and the action field included in the super policy database, whether all of the one or more conditions associated with the super policy are satisfied based on the message; and perform, when all of the one or more conditions associated with the super policy are satisfied, an action to control user access to one or more zones in the private network, where the action is based on the condition field and the action field of the one of the one or more records in the super policy database.