Patent ID: 7207064

Claim:
In an evidence based security model that evaluates multiple pieces of evidence using a security policy to determine a set of granted permissions, and wherein one piece of the multiple pieces of evidence is used to determine whether a first permission is granted, a computer-implemented method for determining a subset of the permissions, comprising the steps of: (a) prior to receiving an initial request to determine whether the first permission is granted, evaluating the one piece of evidence using the security policy, based on one or more values of the one piece of evidence, to determine resultant permissions, and storing the results; (b) verifying a consistency of the stored resultant permissions at runtime; (c) loading the stored resultant permissions if the resultant permissions are verified; (d) upon receiving a request to determine whether the first permission is granted, wherein the request comprises an instance of the one piece of evidence, querying the stored results to determine whether the first permission is granted; and (e) in response to determining that the first permission is granted, responding to the request with an indication that the first permission is granted.