Methods and apparatus for scoped role-based access control

Abstract

Methods and apparatus for providing role-based access control of a resource by a subject in an access control system are provided. The system comprises one or more roles capable of association with one or more subjects, and a plurality of permission sets. One or more of the plurality of permission sets are associated with each of the one or more roles. The system further comprises a plurality of resources. One or more of the plurality of resources are associated with each of the one or more permission sets, and each of the plurality of resources is associated with a set of one or more subjects. A given subject in a set of one or more subjects for a given resource and having a role-permission association with the given resource is provided access control of the given resource.

Description

CROSS REFERENCE TO RELATED APPLICATIONS[0001]This application is related to: the U.S. Patent Application Attorney Docket No. YOR920060467US1, entitled “Methods and Apparatus for Composite Configuration Item Management in Configuration Management Database;” the U.S. Patent Application Attorney Docket No. YOR920060468US1, entitled “Methods and Apparatus for Global Service Management of Configuration Management Databases;” the U.S. Patent Application Attorney Docket No. YOR920060469US1, entitled “Methods and Apparatus for Automatically Creating Composite Configuration Items in Configuration Management Database;” and the U.S. Patent Application Attorney Docket No. YOR920060478US1, entitled “Methods and Apparatus for Managing Configuration Management Database via Composite Configuration Item Change History” which are filed concurrently herewith and incorporated by reference herein.FIELD OF THE INVENTION[0002]The present invention relates to information technology (IT) systems and, more p...

AI Technical Summary

Benefits of technology

[0011]The embodiments of the present invention provide a scoped role-based access control system, in which a role is associated with multiple sets of permissions and multiple resources are bound to a permission set. A scope is created to associate subjects

Problems solved by technology

However, there are drawbacks with the traditional RBAC system, especially in large distributed systems because subjects with the same role always have the same set of permissions against the same set of resources.

Additionally, there is no mechanism to distinguish a role across organizations in a large scale system where multiple organizations may be operating concurrently.

Images