US 11,057,434 B2Granted

High performance access control

AssigneeInternational Business Machines Corporation

InventorsJohn Christopher Lynk, Arn Hyndman, Albert Frederich Reiche

Life of this patent

Estimating the term…

Loading patent…

Abstract

A computer program product including a computer readable storage medium having program instructions to: receive a request for access to a micro-service for a subject to perform an action using a resource; determine whether an access policy governing the access for the subject to perform the action using the resource is stored in a cache memory; in response to the access policy being stored in the cache memory, allow or deny the request to the micro-service based on the access policy; and in response to the access policy not being stored in the cache memory, request a new access policy for the subject to perform the action using the resource, receive the new access policy that includes an access decision and a duration of the new access policy, allow or deny the request based on the new access policy, and store the new access policy in the cache memory.

Claims20

Dependent claims

A computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a computer device to cause the computer device to:

receive a request for access to a micro-service for at least one subject to perform at least one action using at least one resource;
determine whether an access policy governing the access for the at least one subject to perform the at least one action using the at least one resource is stored in a cache memory at a policy enforcement point (PEP) for the micro-service;
in response to the access policy being stored in the cache memory, allow or deny the request to the micro-service based on the access policy;
in response to the access policy not being stored in the cache memory,
request a new access policy for the at least one subject to perform the at least one action using the at least one resource;
receive the new access policy that includes an access decision and a duration of the new access policy;
allow or deny the request based on the new access policy;
and
store the new access policy in the cache memory as a result of receiving the request.

6 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/210,509Filed 5 Dec 2018
Published: US 2020/0186570 A111 Jun 2020
Granted: 6 Jul 2021
Term ends: Not estimatedThe source records don’t support an estimate.

Classification4 codes

H04L 63/102
For controlling access to devices or network resources: entity profiles
H04L 63/20
Network architectures or network communication protocols for network security: for managing network security; network security policies in general
H04L 63/10
Network architectures or network communication protocols for network security: for controlling access to devices or network resources
H04L
Digital communication