Automatic Policy Generation Based on Role Entitlements and Identity Attributes

Policies defining the entitlements to be assigned to a new identity joining a role are automatically generated. An automatic policy assigns a new identity the entitlements commonly owned by a predetermined number of identities in the role, which may be all of the role identities. A conditional polic...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: KUEHR-MCLAREN DAVID G, WILLIAMS VINCENT C, GUPTA PRATIK, CUTCHER SHARON L, SHANKAR HARI, STUBE BRIAN A, SAMPATHKUMAR GOVINDARAJ, TAANK SUMIT
Format: Patent
Sprache:eng
Schlagworte:
Online-Zugang:Volltext bestellen
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
container_end_page
container_issue
container_start_page
container_title
container_volume
creator KUEHR-MCLAREN DAVID G
WILLIAMS VINCENT C
GUPTA PRATIK
CUTCHER SHARON L
SHANKAR HARI
STUBE BRIAN A
SAMPATHKUMAR GOVINDARAJ
TAANK SUMIT
description Policies defining the entitlements to be assigned to a new identity joining a role are automatically generated. An automatic policy assigns a new identity the entitlements commonly owned by a predetermined number of identities in the role, which may be all of the role identities. A conditional policy recommends that a new identity be assigned the non-commonly-owned entitlements associated with the role identity whose non-entitlement attributes most closely match the non-entitlement attributes of the new identity. This may be automatically determined by iterating through a vector that maps the non-commonly-owned entitlements with the non-entitlement attributes of each role identity, comparing the non-entitlement attributes of the new identity to find the closest match. The non-commonly-owned entitlements of that identity are then recommended to be assigned to the new identity, upon approval.
format Patent
fullrecord <record><control><sourceid>epo_EVB</sourceid><recordid>TN_cdi_epo_espacenet_US2008016104A1</recordid><sourceformat>XML</sourceformat><sourcesystem>PC</sourcesystem><sourcerecordid>US2008016104A1</sourcerecordid><originalsourceid>FETCH-epo_espacenet_US2008016104A13</originalsourceid><addsrcrecordid>eNrjZPBzLC3Jz00syUxWCMjPyUyuVHBPzUstAgrk5yk4JRanpigAGUH5OakKrnklmSU5qbmpeSXFCol5KQqeKakgoUoFx5KSosyk0pLUYh4G1rTEnOJUXijNzaDs5hri7KGbWpAfn1pckJgMNL0kPjTYyMDAwsDQzNDAxNHQmDhVANRLN0Y</addsrcrecordid><sourcetype>Open Access Repository</sourcetype><iscdi>true</iscdi><recordtype>patent</recordtype></control><display><type>patent</type><title>Automatic Policy Generation Based on Role Entitlements and Identity Attributes</title><source>esp@cenet</source><creator>KUEHR-MCLAREN DAVID G ; WILLIAMS VINCENT C ; GUPTA PRATIK ; CUTCHER SHARON L ; SHANKAR HARI ; STUBE BRIAN A ; SAMPATHKUMAR GOVINDARAJ ; TAANK SUMIT</creator><creatorcontrib>KUEHR-MCLAREN DAVID G ; WILLIAMS VINCENT C ; GUPTA PRATIK ; CUTCHER SHARON L ; SHANKAR HARI ; STUBE BRIAN A ; SAMPATHKUMAR GOVINDARAJ ; TAANK SUMIT</creatorcontrib><description>Policies defining the entitlements to be assigned to a new identity joining a role are automatically generated. An automatic policy assigns a new identity the entitlements commonly owned by a predetermined number of identities in the role, which may be all of the role identities. A conditional policy recommends that a new identity be assigned the non-commonly-owned entitlements associated with the role identity whose non-entitlement attributes most closely match the non-entitlement attributes of the new identity. This may be automatically determined by iterating through a vector that maps the non-commonly-owned entitlements with the non-entitlement attributes of each role identity, comparing the non-entitlement attributes of the new identity to find the closest match. The non-commonly-owned entitlements of that identity are then recommended to be assigned to the new identity, upon approval.</description><language>eng</language><subject>CALCULATING ; COMPUTING ; COUNTING ; ELECTRIC DIGITAL DATA PROCESSING ; PHYSICS</subject><creationdate>2008</creationdate><oa>free_for_read</oa><woscitedreferencessubscribed>false</woscitedreferencessubscribed></display><links><openurl>$$Topenurl_article</openurl><openurlfulltext>$$Topenurlfull_article</openurlfulltext><thumbnail>$$Tsyndetics_thumb_exl</thumbnail><linktohtml>$$Uhttps://worldwide.espacenet.com/publicationDetails/biblio?FT=D&amp;date=20080117&amp;DB=EPODOC&amp;CC=US&amp;NR=2008016104A1$$EHTML$$P50$$Gepo$$Hfree_for_read</linktohtml><link.rule.ids>230,308,776,881,25543,76294</link.rule.ids><linktorsrc>$$Uhttps://worldwide.espacenet.com/publicationDetails/biblio?FT=D&amp;date=20080117&amp;DB=EPODOC&amp;CC=US&amp;NR=2008016104A1$$EView_record_in_European_Patent_Office$$FView_record_in_$$GEuropean_Patent_Office$$Hfree_for_read</linktorsrc></links><search><creatorcontrib>KUEHR-MCLAREN DAVID G</creatorcontrib><creatorcontrib>WILLIAMS VINCENT C</creatorcontrib><creatorcontrib>GUPTA PRATIK</creatorcontrib><creatorcontrib>CUTCHER SHARON L</creatorcontrib><creatorcontrib>SHANKAR HARI</creatorcontrib><creatorcontrib>STUBE BRIAN A</creatorcontrib><creatorcontrib>SAMPATHKUMAR GOVINDARAJ</creatorcontrib><creatorcontrib>TAANK SUMIT</creatorcontrib><title>Automatic Policy Generation Based on Role Entitlements and Identity Attributes</title><description>Policies defining the entitlements to be assigned to a new identity joining a role are automatically generated. An automatic policy assigns a new identity the entitlements commonly owned by a predetermined number of identities in the role, which may be all of the role identities. A conditional policy recommends that a new identity be assigned the non-commonly-owned entitlements associated with the role identity whose non-entitlement attributes most closely match the non-entitlement attributes of the new identity. This may be automatically determined by iterating through a vector that maps the non-commonly-owned entitlements with the non-entitlement attributes of each role identity, comparing the non-entitlement attributes of the new identity to find the closest match. The non-commonly-owned entitlements of that identity are then recommended to be assigned to the new identity, upon approval.</description><subject>CALCULATING</subject><subject>COMPUTING</subject><subject>COUNTING</subject><subject>ELECTRIC DIGITAL DATA PROCESSING</subject><subject>PHYSICS</subject><fulltext>true</fulltext><rsrctype>patent</rsrctype><creationdate>2008</creationdate><recordtype>patent</recordtype><sourceid>EVB</sourceid><recordid>eNrjZPBzLC3Jz00syUxWCMjPyUyuVHBPzUstAgrk5yk4JRanpigAGUH5OakKrnklmSU5qbmpeSXFCol5KQqeKakgoUoFx5KSosyk0pLUYh4G1rTEnOJUXijNzaDs5hri7KGbWpAfn1pckJgMNL0kPjTYyMDAwsDQzNDAxNHQmDhVANRLN0Y</recordid><startdate>20080117</startdate><enddate>20080117</enddate><creator>KUEHR-MCLAREN DAVID G</creator><creator>WILLIAMS VINCENT C</creator><creator>GUPTA PRATIK</creator><creator>CUTCHER SHARON L</creator><creator>SHANKAR HARI</creator><creator>STUBE BRIAN A</creator><creator>SAMPATHKUMAR GOVINDARAJ</creator><creator>TAANK SUMIT</creator><scope>EVB</scope></search><sort><creationdate>20080117</creationdate><title>Automatic Policy Generation Based on Role Entitlements and Identity Attributes</title><author>KUEHR-MCLAREN DAVID G ; WILLIAMS VINCENT C ; GUPTA PRATIK ; CUTCHER SHARON L ; SHANKAR HARI ; STUBE BRIAN A ; SAMPATHKUMAR GOVINDARAJ ; TAANK SUMIT</author></sort><facets><frbrtype>5</frbrtype><frbrgroupid>cdi_FETCH-epo_espacenet_US2008016104A13</frbrgroupid><rsrctype>patents</rsrctype><prefilter>patents</prefilter><language>eng</language><creationdate>2008</creationdate><topic>CALCULATING</topic><topic>COMPUTING</topic><topic>COUNTING</topic><topic>ELECTRIC DIGITAL DATA PROCESSING</topic><topic>PHYSICS</topic><toplevel>online_resources</toplevel><creatorcontrib>KUEHR-MCLAREN DAVID G</creatorcontrib><creatorcontrib>WILLIAMS VINCENT C</creatorcontrib><creatorcontrib>GUPTA PRATIK</creatorcontrib><creatorcontrib>CUTCHER SHARON L</creatorcontrib><creatorcontrib>SHANKAR HARI</creatorcontrib><creatorcontrib>STUBE BRIAN A</creatorcontrib><creatorcontrib>SAMPATHKUMAR GOVINDARAJ</creatorcontrib><creatorcontrib>TAANK SUMIT</creatorcontrib><collection>esp@cenet</collection></facets><delivery><delcategory>Remote Search Resource</delcategory><fulltext>fulltext_linktorsrc</fulltext></delivery><addata><au>KUEHR-MCLAREN DAVID G</au><au>WILLIAMS VINCENT C</au><au>GUPTA PRATIK</au><au>CUTCHER SHARON L</au><au>SHANKAR HARI</au><au>STUBE BRIAN A</au><au>SAMPATHKUMAR GOVINDARAJ</au><au>TAANK SUMIT</au><format>patent</format><genre>patent</genre><ristype>GEN</ristype><title>Automatic Policy Generation Based on Role Entitlements and Identity Attributes</title><date>2008-01-17</date><risdate>2008</risdate><abstract>Policies defining the entitlements to be assigned to a new identity joining a role are automatically generated. An automatic policy assigns a new identity the entitlements commonly owned by a predetermined number of identities in the role, which may be all of the role identities. A conditional policy recommends that a new identity be assigned the non-commonly-owned entitlements associated with the role identity whose non-entitlement attributes most closely match the non-entitlement attributes of the new identity. This may be automatically determined by iterating through a vector that maps the non-commonly-owned entitlements with the non-entitlement attributes of each role identity, comparing the non-entitlement attributes of the new identity to find the closest match. The non-commonly-owned entitlements of that identity are then recommended to be assigned to the new identity, upon approval.</abstract><oa>free_for_read</oa></addata></record>
fulltext fulltext_linktorsrc
identifier
ispartof
issn
language eng
recordid cdi_epo_espacenet_US2008016104A1
source esp@cenet
subjects CALCULATING
COMPUTING
COUNTING
ELECTRIC DIGITAL DATA PROCESSING
PHYSICS
title Automatic Policy Generation Based on Role Entitlements and Identity Attributes
url https://sfx.bib-bvb.de/sfx_tum?ctx_ver=Z39.88-2004&ctx_enc=info:ofi/enc:UTF-8&ctx_tim=2025-01-22T06%3A06%3A16IST&url_ver=Z39.88-2004&url_ctx_fmt=infofi/fmt:kev:mtx:ctx&rfr_id=info:sid/primo.exlibrisgroup.com:primo3-Article-epo_EVB&rft_val_fmt=info:ofi/fmt:kev:mtx:patent&rft.genre=patent&rft.au=KUEHR-MCLAREN%20DAVID%20G&rft.date=2008-01-17&rft_id=info:doi/&rft_dat=%3Cepo_EVB%3EUS2008016104A1%3C/epo_EVB%3E%3Curl%3E%3C/url%3E&disable_directlink=true&sfx.directlink=off&sfx.report_link=0&rft_id=info:oai/&rft_id=info:pmid/&rfr_iscdi=true