Patent ID: 8387117

Claim:
A context-aware role-based access control system comprising: a processor and a memory storing a software, that when executed by the processor performs: a context-aware user assignment manager (CAUAM) for performing a role assignment function, a role delegation function, or a role revocation function for a user according to a context of the user without intervention from a security manager, based on a preset context request condition including at least one context description connecting a plurality of contexts with the user; a context-aware permission assignment manager (CAPAM) for performing a permission modification, a permission restoration, and a personalized permission modification for a permission, which the role has, according to changes in the context of the user; an information repository for storing a user profile and context information; an access control manager (ACM) for controlling the context-aware user assignment manager, the context-aware permission assignment manager, and the information repository, and processing an access control request; and a personalized permission modification component (PPMC) for modifying the permission, which the role assigned to the user has, into a permission preferred by the user among permissions for performing an equal operation, by making reference to a user profile.