Please download the dossier by clicking on the dossier button x
×

System and method for representing multiple security groups as a single data object

  • US 7,480,798 B2
  • Filed: 06/05/2003
  • Issued: 01/20/2009
  • Est. Priority Date: 06/05/2003
  • Status: Active Grant
First Claim
Patent Images

1. A method of authenticating an access request in a data processing system, comprising:

  • receiving the access request, wherein the access request includes a group identifier and designates a resource to which access is requested;

    retrieving a complex group data object associated with the resource, wherein the complex group data object includes a group set value representing a plurality of requestor groups and a mask value, wherein the mask value masks out bits in the group identifier; and

    authenticating the access request based on the group identifier, group set value, and mask value, wherein authenticating the request based on the group identifier, group set value, and mask value includes;

    applying the mask value to the group identifier to generate a masked group identifier; and

    comparing the mask group identifier to the group set value;

    wherein comparing the masked group identifier to the group set value includes;

    applying the mask value to the group set value to generate a masked group set value; and

    comparing the masked group identifier to the masked group set value;

    if the masked group identifier matches the masked group set value, then the access request is authorized;

    if the masked group identifier does not match the masked group set value, then the access request is denied.

View all claims
  • 1 Assignment
Timeline View
Assignment View
    ×
    ×