Systems and methods for access control policy management
AssigneeNetflix, Inc.
InventorsDavid Imran Noor, Allen J Collins, Brandon Christopher Quan
Life of this patent
Estimating the term…
Abstract
A computer-implemented method and system for managing access control policies for diverse database tables. The method involves consolidating access control by associating each table with a common set of access control policies, enforcing these policies to control access, and providing automated management without administrator input. The automated management includes auditing the policies, detecting discrepancies, and remedying them by modifying the policies. The system comprises at least one physical processor and memory containing instructions that, when executed, perform the method described.
Claims20
A computer-implemented method comprising:
- consolidating, by a computing device of a security management system, access control to a set of diverse database tables by associating each table in the set of diverse database tables with a set of common access control policies, at least two of the tables in the set of diverse database tables being unrelated but for the set of common access control policies;
- enforcing, by the computing device of the security management system, the set of common access control policies to control access to each table in the set of diverse database tables;
- and
- providing, by the computing device of the security management system and without administrator input, automated management of the set of common access control policies.
A system comprising:
- at least one physical processor;
- and
- physical memory comprising computer-executable instructions that, when executed by the physical processor, cause the physical processor to:
- consolidate, by a computing device of a security management system, access control to a set of diverse database tables by associating each table in the set of diverse database tables with a set of common access control policies, at least two of the tables in the set of diverse database tables being unrelated but for the set of common access policies;
- enforce, by the computing device of the security management system, the set of common access control policies to control access to each table in the set of diverse database tables;
- and
- provide, by the computing device of the security management system and without administrator input, automated management of the set of common access control policies.
A non-transitory computer-readable medium comprising one or more computer-executable instructions that, when executed by at least one processor of a computing device, cause the computing device to:
- consolidate, by a computing device of a security management system, access control to a set of diverse database tables by associating each table in the set of diverse database tables with a set of common access control policies, at least two of the tables in the set of diverse database tables being unrelated but for the set of common access control policies;
- enforce, by the computing device of the security management system, the set of common access control policies to control access to each table in the set of diverse database tables;
- and
- provide, by the computing device of the security management system and without administrator input, automated management of the set of common access control policies.
Dependencies are inferred from the claim text.