3 results about "Extended Access Control" patented technology

This application discloses a method and system for extended access control of power grid data, relating to the field of cross-regional and cross-domain sharing of power grid data. The main technical solution of this application is as follows: This application uses static tags to provide constrained access control for data callers, and uses dynamic tags to provide propagation access control for the next data caller. Then, when there are multiple iterative data callers, by utilizing the static tags associated with the target power grid data and the continuously updated dynamic tags, it realizes the propagation monitoring of the target power grid data across geographical regions and / or across business domains, thereby providing an effective solution for extended access control of power grid data.

This application discloses a security design and architecture for multi-tenant Hadoop clusters. In one embodiment, in a multi-tenant Hadoop cluster comprising multiple tenants and multiple applications, a method for identifying, naming, and creating a multi-tenant directory structure in the multi-tenant Hadoop cluster may include: (1) identifying multiple groups of a directory structure selected from groups consisting of a superuser group, multiple tenant groups, and at least one application group; (2) creating a valid directory for each of the groups; (3) adding each of the multiple users to one of the multiple tenant groups and the application group; (4) creating a tenant directory and a home directory for the users; and (5) assigning an owner, group owner, default permissions, and extended access control lists to the tenant directory and the home directory.

Provided are a platform and a computer-implemented process of controlling access to a restricted resource by verifying qualifications in compliance with a regulatory security framework. A computing system receives a configuration package including a qualification set, a threshold trust for a qualification, a plurality of different sources that could potentially provide information indicative of the qualification, and a different trust level to be assigned to each of the sources. The computing system also receives the information indicative of the qualification from a first source. A first trust level assigned to the first source is compared to the threshold trust associated with the qualification. Responsive to a determination that the first trust level satisfies the trust threshold, the qualification is flagged as being verified without human intervention to control access to the restricted resource.