Patent Document ID: 8713639
Application ID: 13549244
Patent Status: 1

Claim One:
1. A system comprising: at least one device including a hardware processor; the system being configured to perform operations comprising: receiving a first request; determining a first set of one or more attributes in a first framework-specific representation based on the first request; translating the first set of attributes from the first framework-specific representation to a canonical representation; applying policy rules to the first set of attributes in the canonical representation to determine whether to grant the first request; receiving a second request; determining a second set of one or more attributes in a second framework-specific representation based on the second request, the second framework-specific representation being different than the first framework-specific representation; wherein at least one of the second set of one or more attributes is associated with a backend service and/or a backend server; translating the second set of attributes from the second framework-specific representation to the canonical representation; applying policy rules to the second set of attributes in the canonical representation to determine whether to grant the second request.