Granular authorization flow in a distributed, multi-domain computing system
AssigneeDisney Enterprises, Inc.
InventorsKerry D. Brabble, Robert K. Floyd, III, Nicholas Jordan Lewis
Life of this patent
Estimating the term…
Abstract
The present invention sets forth a technique for automatically managing access control authorization in a distributed computing system. This technique includes receiving an access request from a requesting entity and recording the access request in an audit log. The technique also includes retrieving access control policies associated with the access request and retrieving attribute data values from an entity data store. The technique further includes generating an access request evaluation based on the access request, the access control policies, and the attribute data values. The technique further includes transmitting the access request evaluation to the requesting entity.
Claims20
A computer-implemented method for performing authorization flow, the computer-implemented method comprising:
- receiving an access request from a requesting entity in a distributed computing system, wherein the access request specifies an automated workflow and includes first attribute values associated with one or more executable commands included in the automated workflow;
- retrieving one or more access control policies associated with the access request;
- retrieving, from an entity data store, second attribute values for one or more attributes included in the one or more access control policies;
- generating, based on the first and second attribute values and the one or more access control policies, an access request evaluation;
- and
- transmitting the access request evaluation to the requesting entity.
One or more non-transitory computer-readable media storing instructions that, when executed by one or more processors, cause the one or more processors to perform the steps of:
- receiving an access request from a requesting entity in a distributed computing system, wherein the access request specifies an automated workflow and includes first attribute values associated with one or more executable commands included in the automated workflow;
- retrieving one or more access control policies associated with the access request;
- retrieving, from an entity data store, second attribute values for one or more attributes included in the one or more access control policies;
- generating, based on the first and second attribute values and the one or more access control policies, an access request evaluation;
- and
- transmitting the access request evaluation to the requesting entity.
A system comprising:
- one or more memories storing instructions;
- and
- one or more processors for executing the instructions to:
- receive an access request from a requesting entity in a distributed computing system, wherein the access request specifies an automated workflow and includes first attribute values associated with one or more executable commands included in the automated workflow;
- retrieve one or more access control policies associated with the access request;
- retrieve, from an entity data store, second attribute values for one or more attributes included in the one or more access control policies;
- generate, based on the first and second attribute values and the one or more access control policies, an access request evaluation;
- and
- transmitting the access request evaluation to the requesting entity.
Dependencies are inferred from the claim text.