ACCESS RIGHT CONTROL USING ACCESS CONTROL ALERTS

• US 20110214164A1
• Filed: 05/11/2011
• Published: 09/01/2011
• Est. Priority Date: 01/29/2003
• Status: Active Grant

• Current Assignee: Nokia Corporation
• Original Assignee: Nokia Corporation
• Inventors: Mehta, Kuleen, Trossen, Dirk
• Granted Patent: US 9,497,279 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 65/1101 Session protocols
• CPC Class Codes: H04L 65/1104 Session initiation protocol [SIP]
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 67/54 Presence management, e.g. monitoring or registration for receipt of user log-on information, or the connection status of the users
• CPC Class Codes: H04L 67/55 Push-based network services

Abstract

Systems and methods are provided for providing access controlled event subscription and notification and event access change alerts. In some embodiments, the systems and methods of the present invention operate within a SIP infrastructure. As such, SIP SUBSCRIBE messages and SIP NOTIFY messages are used for subscribing to and receiving notifications related to access control. According to some embodiments, event access change alerts are used in conjunction with access controlled event subscription to provide an efficient method for providing access controlled event subscription using current access control information.

Claims

1. A method comprising:

creating a subscribe message comprising a request for information about access rights for a resource and for information about at least one change of the access rights, wherein the subscribe message specifies an event package and an event type to which to subscribe;

determining to send the subscribe message; and

receiving, in response to the sent subscribe message, a notify message specifying information about a description of the resource, access right information relating to access by other entities to the resource, and an event triggering at least one change of the access rights.

2. A method of claim 1, further comprising:

including changed access rights for the resource in the notify message, or receiving another notify message specifying information about the changed access rights for the resource.

3. A method of claim 1, wherein the subscribe message is sent to a network entity that comprises an event server.

4. A method of claim 1, wherein the information about access rights comprises information having an attribute-based format that conforms with either a service location protocol (SLP) or Resource Description Framework (RDF).

5. A method of claim 2, wherein the subscribe message and the notify message are generated according to a session initiation protocol.

6. A method of claim 1, further comprising interacting with a network entity to change the access rights for the event package, wherein the subscribe message is sent to another network entity.

7. A method comprising:

receiving, from a requester, a subscribe message comprising a request for information about access rights for a resource and for information about at least one change of the access rights;

determining whether the requester is authorized to obtain status information about the access rights for the resource;

matching the information about access rights with the access rights via a repository if the determination does not indicate denial of access; and

creating, in response to the subscribe message, a notify message specifying information about a description of the resource, access right information relating to access by other entities to the resource, and an event triggering at least one change of the access rights.

8. A method of claim 7, further comprising:

including changed access rights for the resource in the notify message, or creating another notify message specifying information about changed access rights for the resource.

9. A method of claim 7, wherein the subscribe message is received at a network entity that comprises an event server.

10. A method of claim 7, wherein the matching of the information comprises:

determining to send a match message to the repository, the match message requesting access rights information for the resource; and

receiving a response from the repository, the response comprising access right information for the resource.

11. A method of claim 8, wherein the subscribe message and the notify message are generated according to a session initiation protocol.

12. A method of claim 7, further comprising:

receiving the status information from a local cache of access rights.

13. An apparatus comprising:

at least one processor; and

at least one memory including computer program code for one or more programs,

the at least one memory and the computer program code configured to with the at least one processor, cause the apparatus to perform at least the following,

create a subscribe message comprising a request for information about access rights for a resource and for information about at least one change of the access rights, wherein the subscribe message specifies an event package and an event type to which to subscribe;

determine to send the subscribe message; and

receive, in response to the sent subscribe message, a notify message specifying information about a description of the resource, access right information relating to access by other entities to the resource, and an event triggering at least one change of the access rights.

14. An apparatus of claim 13, wherein the apparatus is further caused to:

include changed access rights for the resource in the notify message, or receive another notify message specifying information about the changed access rights for the resource.

15. An apparatus of claim 13, wherein the subscribe message is sent to a network entity that comprises an event server.

16. An apparatus of claim 13, wherein the information about access rights comprises information having an attribute-based format that conforms with either a service location protocol (SLP) or Resource Description Framework (RDF).

17. An apparatus comprising:

at least one processor; and

at least one memory including computer program code for one or more programs,

the at least one memory and the computer program code configured to with the at least one processor, cause the apparatus to perform at least the following;

receive, from a requester, a subscribe message comprising a request for information about access rights for a resource and for information about at least one change of the access rights;

determine whether the requester is authorized to obtain status information about the access rights for the resource;

match the information about access rights with the access rights via a repository if the determination does not indicate denial of access; and

create, in response to the subscribe message, a notify message specifying information about a description of the resource, access right information relating to access by other entities to the resource, and an event triggering at least one change of the access rights.

18. An apparatus of claim 17, wherein the apparatus is further caused to:

include changed access rights for the resource in the notify message, or create another notify message specifying information about changed access rights for the resource.

19. An apparatus of claim 17, wherein the apparatus matches the information by:

determining to send a match message to the repository, the match message requesting access rights information for the resource; and

receiving a response from the repository, the response comprising access right information for the resource.

20. An apparatus of claim 17, wherein the subscribe message and the notify message are generated according to a session initiation protocol.