SYSTEM, METHOD AND COMPUTER PROGRAM PRODUCT FOR ACCESS CONTROL
First Claim
1. A method for controlling access to a resources group comprising multiple computer accessible resources, the method comprising:
- receiving a plurality of requests for granting a respective plurality of processes access to at least one resource of the resources group for performing respective tasks;
denying a request out of the plurality of requests, when a resource-associated lock of a respective resource is locked;
for any process out of the plurality of processes whose request to access a respective resource was denied, attempting to acquire a global lock for the respective process and granting access to the respective resource for performing of the respective task only after the global lock was acquired for the respective process;
upon acquisition of a global lock for a process that is associated with the request, granting exclusive access to a resource-associated data structure and adding to the data structure a pending-task entry that is associated with the process; and
upon a releasing of the resource associated lock selectively granting exclusive access to the resource for performing a task associated with the pending task entry.
3 Assignments
0 Petitions
Accused Products
Abstract
An access control system for controlling access to a resources group including multiple computer accessible resources, the system including: a lock, configured to selectively deny a request of a process to access the resource when the resource is locked; and a global lock, configured to grant to the process exclusive access to add a pending-task entry into a resource-associated data structure associated with the resource; wherein the global lock has to be acquired by any process whose request to access any resource of the resources group for performing of any task was denied, in order for access thereto for performing the respective task to be granted; wherein the lock is further configured to selectively grant, following the adding of the pending task-entry into the resource-associated data structure, exclusive access to the resource for performing a task associated with the pending task entry upon a releasing of the resource associated lock.
58 Citations
26 Claims
-
1. A method for controlling access to a resources group comprising multiple computer accessible resources, the method comprising:
-
receiving a plurality of requests for granting a respective plurality of processes access to at least one resource of the resources group for performing respective tasks; denying a request out of the plurality of requests, when a resource-associated lock of a respective resource is locked; for any process out of the plurality of processes whose request to access a respective resource was denied, attempting to acquire a global lock for the respective process and granting access to the respective resource for performing of the respective task only after the global lock was acquired for the respective process; upon acquisition of a global lock for a process that is associated with the request, granting exclusive access to a resource-associated data structure and adding to the data structure a pending-task entry that is associated with the process; and upon a releasing of the resource associated lock selectively granting exclusive access to the resource for performing a task associated with the pending task entry. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9)
-
-
10. An access control system for controlling access to a resources group comprising multiple computer accessible resources, the system comprising:
-
a lock, configured to selectively deny a request of a process to access the resource when the resource is locked; and a global lock, configured to grant to the process exclusive access to add a pending-task entry into a resource-associated data structure associated with the resource;
wherein the global lock has to be acquired by any process whose request to access any resource of the resources group for performing of any task was denied, in order for access thereto for performing the respective task to be granted;wherein the lock is further configured to selectively grant, following the adding of the pending task-entry into the resource-associated data structure, exclusive access to the resource for performing a task associated with the pending task entry upon a releasing of the resource associated lock. - View Dependent Claims (11, 12, 13, 14, 15, 16, 17)
-
-
18. A program storage device readable by machine, tangibly embodying a program of instructions executable by the machine to perform a method for controlling access to a resources group comprising multiple computer accessible resources, comprising the steps of:
-
receiving a plurality of requests for granting a respective plurality of processes access to at least one resource of the resources group for performing respective tasks; denying a request out of the plurality of requests, when a resource-associated lock of a respective resource is locked; for any process out of the plurality of processes whose request to access a respective resource was denied, attempting to acquire a global lock for the respective process and granting access to the respective resource for performing of the respective task only after the global lock has been acquired for the respective process; upon acquisition of a global lock for a process that is associated with the request, granting exclusive access to a resource-associated data structure and adding to the data structure a pending-task entry that is associated with the process; and upon a releasing of the resource associated lock selectively granting exclusive access to the resource for performing a task associated with the pending task entry. - View Dependent Claims (19, 20, 21, 22, 23, 24, 25, 26)
-
Specification