Patent Document ID: 8060931
Application ID: 11530438

Base Claim:
1. A system comprising: memory and a processor; and a security scheme module, stored in the memory and executable on the processor, that includes an authorization query table and a syntactic validator that disallows an assertion having a negation element at a first level, wherein the authorization query table includes multiple fields with each field mapping a resource-specific operation to an associated authorization query, and wherein each authorization query is a logical English expression comprising a fact, a condition, and/or a logical operator.

---

Claim 6:
6. The system as recited in claim 1 , wherein the security scheme provides the associated authorization query and an assertion context having multiple assertions to an authorization engine, the assertion context including multiple assertions with at least one assertion relating to the resource-specific operation; and wherein the authorization engine evaluates the associated authorization query in conjunction with the assertion context to make an authorization decision.