Patent ID: 8763093

Claim:
An access control system, comprising a claims processing component configured to expand two or more input claims associated with a device into a set of output claims used to selectively authorize access to system resources by applying facts associated with the two or more input claims against a data structure to expand the two or more input claims into one or more output claims and thereafter iteratively applying a fact associated with the two or more input claims and a fact associated with at least one of the one or more output claims against the data structure to further expand the two or more input claims into the set of output claims; and an authorization component configured to match the set of output claims to an authorization table for rows that contain a matching resource claim, a matching subject claim, and a matching action claim to indicate the device is authorized to access a particular system resource; wherein the claims processing component is configured to produce a first output claim by matching a first input claim, a second input claim, or both the first input claim and the second input claim with at least one row in a rules table; wherein the claims processing component is configured to assign a type and a value of the matched row to the first output claim.