Dynamically configurable distributed security system

Abstract

A system and method for a dynamically configurable security system, comprising, a security service module capable of dynamically instantiating one or more plugin security provider modules, the one or more security provider modules are coupled to the security service module wherein the one or more security provider modules are capable of responding dynamically to changes in configuration information, wherein the security service module is capable of receiving one or more security information updates, and wherein the security service module is capable of controlling access to one or more resources based on the one or more security information updates.

Description

COPYRIGHT NOTICE A portion of the disclosure of this patent document contains material which is subject to copyright protection. The copyright owner has no objection to the facsimile reproduction by anyone of the patent document or the patent disclosure, as it appears in the Patent and Trademark Office patent file or records, but otherwise reserves all copyright rights whatsoever. INCORPORATION BY REFERENCE The following U.S. patent and U.S. patent Publications are hereby incorporated by reference in their entirety: U.S. Pat. No. 6,158,010 entitled SYSTEM AND METHOD FOR MAINTAINING SECURITY IN A DISTRIBUTED COMPUTER NETWORK, by Mark Moriconi et al,. filed Dec. 5, 2000. U.S. patent application Ser. No. 09 / 878,536, entitled SYSTEM AND METHOD FOR SERVER SECURITY AND ENTITLEMENT PROCESSING, by Paul Patrick, filed Jun. 11, 2001, now U.S. Patent Publication No. US2002-0188869, published on Dec. 12, 2002 (Attorney Docket No. BEAS-1084US0); FIELD OF THE DISCLOSURE The present disclosur...

AI Technical Summary

Problems solved by technology

However, ensuring the security of such services is seen as a barrier to their wide-spread adoption.

Thus, the security information and security procedures from one portion of an enterprise application may not be compatible with other portions.

Furthermore, some security models may not take into account that users can have different policies depending on when and how they are interacting with a service.

The result is a collection of services having incompatible silos of security.

Another reason why security remains a barrier to deploying web services is cost.

Even if this were not so, legacy applications not designed for dynamic changes in policy can require that security measures be intricately tied to the application itself.

This leads to a security systems that are brittle and costly to maintain.

Images