Patent ID: 7865931

Claim:
A system for authorizing access to an application on a protected computer network, the system comprising: a web server configured to receive a request; an application server connected to the web server; and a rules store in a data store connected to the application server, wherein the application server is configured to receive the request from the web server, to extract different types of attributes from the request, to retrieve at least one rule from the rules store for a user identification attribute of the different types of attributes, to compare the user identification attribute of the request with an element of user specific information associated with the at least one retrieved rule for the user identification attribute, if the user identification attribute is determined to be authorized based on the comparison, to retrieve at least one rule from the rules store for a money attribute of the different types of attributes, to compare the money attribute of the request with an element of a custom resource associated with the at least one retrieved rule for the money attribute, if the money attribute is determined to be authorized based on the comparison, to combine the user identification attribute and the money attribute, to compare the combined attributes with a logical operator retrieved from the rules store, and to determine whether the combined attributes meet the operator to authorize the request.