Policy delegation for access control

Abstract

A method and system thereof for controlling access to resources. Access to a resource is controlled by a policy definition. A request for access to a resource is received at a first agent. The first agent is authorized to refer policy definitions to other agents. The policy definition for the resource is delegated to a second agent by the first agent using a referral policy. The referral policy includes identification of the resource and identification of the second agent. The second agent is the source of the policy definition that governs access to the resource. The request for access is forwarded to the second agent according to the referral policy. Based on the policy definition, a decision can be made regarding whether the request for access to the resource is granted. The decision can also indicate the actions that may be performed using the resource.

Dependencies are inferred from the claim text.