Patent ID: 7430600

Claim:
A method for making secure a computer system having at least one client machine, at least one server machine, and an existing organizational directory, the method comprising: listing entities in the organizational directory using unique designations, creating a security directory in which modifiable security data are stored, the security data including information for mapping and further comprising at least one access control list for an application, upon receipt of a request from an entity, searching in said security directory using the unique designation of said entity in the directory to obtain security data related to the request from the entity, wherein the searching in said security directory further comprises searching in the security directory for an access control list related to the application involved in the request, considering access to said application to be open if no access control list is found, searching for an entity or for a group to which the entity belongs if the access control list is found, denying access to the application if the entity and/or the group is absent from the access control list, and based on the security data, processing the request or performing other searches for security data if the entity and/or the group is present in the found list.