Patent ID: 8156537

Claim:
A computer-implemented method including executing, using at least one processor, instructions recorded on a non-transitory computer-readable storages medium, the method comprising: receiving, using the at least one processor, at least one access request to one or more resources from an application; providing, using the at least one processor, a resource hierarchy for the one or more resources, the resources having at least one resource class, wherein the resource hierarchy is defined in a single resource and the resource hierarchy defines one or more relationships among the one or more resources; providing, using the at least one processor, a policy comprising at least one access control rule for accessing at least one element of the at least one resource class; verifying, using the at least one processor, the at least one access request based on the policy through an authorization service; and processing, using the at least one processor, the at least one access request through a service interface.