Security and access management system for web-enabled and non-web-enabled applications and content on a computer network

• US 6,460,141 B1
• Filed: 10/28/1998
• Issued: 10/01/2002
• Est. Priority Date: 10/28/1998
• Status: Expired due to Term

• Current Assignee: Emc IP Holding Company LLC (Dell Technologies Inc.)
• Original Assignee: RSA Security Incorporated (Symphony Technology Group LLC)
• Inventors: Olden, Eric M.
• Primary Examiner(s): Wright, Norman M.
• Application Number:
  US09/182,265
• Time in Patent Office: 1,434 Days
• Field of Search: 713/200, 713/201, 713/202, 713/203
• US Class Current: 726/4
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A security and access management system provides unified access management to address the specific problems facing the deployment of security for the Web and non-Web environment. Unified access management consists of strategic approaches to unify all key aspects of Web and non-Web security policies, including access control, authorization, authentication, auditing, data privacy, administration, and business rules. Unified access management also addresses technical scalability requirements needed to successfully deploy a reliable unified Web and non-Web security system. The security and access management system provides the technology required to support these key factors as they relate to Web and non-Web security. The security and access management system operates in combination with network and system security tools such as firewalls, network intrusion detection tools, and systems management tools to provide comprehensive security for the Web-enabled enterprise.

Claims

1. A security and access management system for at least one application on a computer network, comprising:

at least one computer operated by a user;

at least one application server for executing the application in response to access granted to a request generated by the user;

a communication link for interconnecting the computer operated by the user to the application server;

at least one authorization server connected to the application server for performing authorization processing; and

an entitlements database interfaced to the authorization server, the entitlements database for storing data utilized by the authorization server for responding to the request generated by the user to one of grant or deny the request for execution of the application by the user.

2. The system of claim 1 wherein there is a plurality of authorization servers, the system further comprising an authorization dispatcher for routing a request for access to the application to one of the authorization servers.

3. The system of claim 1, further comprising an API client connected to an API server for entry of data on which the response to the request is based, the system further comprising an entitlements server connected to the API server for entering the data needed for responding to requests into the entitlements database.