Distributed knowledge access control
AssigneeMicrosoft Corporation
InventorsYuri Gurevich, Muthukrishnan Paramasivam, Itay Neeman
Life of this patent
Estimating the term…
Abstract
Techniques for distributed knowledge access control are disclosed herein. These techniques may enable access control information to be provided in the form of a statement that includes an assertion and a construct that targets the assertion to one or more intended entities. By targeting the statement to intended entities, the construct may help protect resources from unauthorized use and may also help protect the issuer of the statement from accountability resulting from misuse of the statement.
Claims20
A computer-readable medium having stored thereon computer-executable instructions for controlling, by an entity, access to a resource based on information by performing the following steps:
- determining a known portion the information, the known portion comprising an assertion issued by the entity itself or an assertion issued by another entity and targeted to the entity;
- and
- determining whether to grant access to the resource based on the known portion of the information.
A computer-readable medium having stored thereon computer-executable instructions for performing the following steps:
- generating an assertion;
- identifying an intended entity to which the assertion is targeted;
- and
- generating a statement comprising the assertion and a construct that targets the assertion to the intended entity.
A method for controlling, by an entity, access to a resource based on information, the method comprising:
- determining a known portion of the information, the known portion comprising an assertion issued by the entity itself or an assertion issued by another entity and targeted to the entity;
- and
- determining whether to grant access to the resource based on the known portion of the information.
Dependencies are inferred from the claim text.