Patent ID: 7441265

Claim:
An ingress-session-based authorization and access control method in a data processing system to control access from an initiator-host to objects on a target host comprising the steps of: (i) receiving an access-request originally coming from the initiator-host, that references an object on the target host to access, (ii) assigning the access-request to an ingress-session and selecting a session context belonging to that ingress-session, (iii) checking whether the access to the referenced object is authorized in the selected session-context or not, (iv) denying the access to the referenced object if the access to said object on the target host is not authorized in the selected session context, (v) granting the access to the referenced object if the access to said object on the target host is allowed in the selected session context, (vi) handing over references to objects on the target host to the initiator-host as a response to a granted access-request, and (vii) authorizing the handed over reference for access in that session-context.