Policy-based Data Store Access Authorization
卷宗概要
发明人
Jay R. BARR; Manoj SUKUMARAN
IPC 分类
CPC 分类
A method of providing access to a data store. The method comprises receiving a request for authorization of access to a data store by a broker application, wherein the request comprises information a client identity and an identity of requested data; formatting a policy management authorization request according to a policy management application format; sending the policy management authorization request to an policy management application; looking up one or more authorization policies by the policy management application, evaluating the policy management authorization request by the policy management application based on the looked up policies; sending an authorization response by the policy management application to the broker application, wherein the authorization response is formatted according to the policy management application format; receiving the authorization response by the broker application from the policy management application; and sending one of an affirmative authorization response or a negative authorization response by the broker application.
原文(中文)
A method of providing access to a data store. The method comprises receiving a request for authorization of access to a data store by a broker application, wherein the request comprises information a client identity and an identity of requested data; formatting a policy management authorization request according to a policy management application format; sending the policy management authorization request to an policy management application; looking up one or more authorization policies by the policy management application, evaluating the policy management authorization request by the policy management application based on the looked up policies; sending an authorization response by the policy management application to the broker application, wherein the authorization response is formatted according to the policy management application format; receiving the authorization response by the broker application from the policy management application; and sending one of an affirmative authorization response or a negative authorization response by the broker application.