POLICY STORE

• US 20080263635A1
• Filed: 04/18/2007
• Published: 10/23/2008
• Est. Priority Date: 04/18/2007
• Status: Active Grant

• Current Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Original Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Inventors: Rubio, Ramon, Tsao, Yeongtau Louis, Bajo, Allison Jowell B.
• Granted Patent: US 7,908,642 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/101 Access control lists [ACL]

Abstract

A method for obtaining resource restriction information of a client application'"'"'s resource includes: receiving authentication information from one of a plurality of authentication modules; identifying a client application'"'"'s resource and authentication module based on the received authentication information; locating a policy store that is associated with the identified client application'"'"'s resource, the policy store containing resource restriction information for each of the plurality of authentication modules; and obtaining the resource restriction information associated with the identified authentication module from the policy store.

Claims

1. A method for obtaining resource restriction information of a client application'"'"'s resource, the method comprising:

receiving authentication information from one of a plurality of authentication modules;

identifying the client application'"'"'s resource and the authentication module based on the received authentication information;

locating a policy store that is associated with the identified client application'"'"'s resource, the policy store containing the resource restriction information for each of the plurality of authentication modules; and

obtaining the resource restriction information associated with the identified authentication module from the policy store.

2. The method according to claim 1, wherein the authentication information includes identification information.

3. The method according to claim 2, wherein the identification information is associated with an access level.

4. The method according to claim 3, wherein the resource restriction information is obtained based on the access level associated with the identification information.

5. The method according to claim 1, wherein the policy store is an access control list.

6. The method according to claim 1, wherein the policy store is stored at a remote location.

7. The method according to claim 1, wherein the policy store is managed by an owner remotely using a web service application.

8. The method according to claim 1, wherein the policy store is managed by an owner locally at a device.

9. A computer-readable medium having stored thereon computer-executable instructions for performing a method comprising:

receiving authentication information from one of a plurality of authentication modules;

identifying the client application'"'"'s resource and the authentication module based on the received authentication information;

locating a policy store that is associated with the identified client application'"'"'s resource, the policy store containing the resource restriction information for each of the plurality of authentication modules; and

obtaining the resource restriction information associated with the identified authentication module from the policy store.

10. A system for obtaining resource restriction information of a client application'"'"'s resource, the system comprising:

a receiving unit configured to receive authentication information from one of a plurality of authentication modules;

an identifying unit configured to identify the client application'"'"'s resource and the authentication module based on the received authentication information;

a locating unit configured to locate a policy store that is associated with the identified client application'"'"'s resource, the policy store containing the resource restriction information for each of the plurality of authentication modules; and

an obtaining unit configured to obtain the resource restriction information associated with the identified authentication module from the policy store.

11. The system according to claim 10, wherein the authentication information includes identification information.

12. The system according to claim 11, wherein the identification information is associated with an access level.

13. The system according to claim 12, wherein the resource restriction information is obtained based on the access level associated with the identification information.

14. The system according to claim 10, wherein the policy store is an access control list.

15. The system according to claim 10, wherein the policy store is stored at a remote location.

16. The system according to claim 10, wherein the policy store is managed by an owner remotely using a web service application.

17. The system according to claim 10, wherein the policy store is managed by an owner locally at a device.