US 2012/0060207 A1Published application

Role-based attribute based access control (rabac)

AssigneeeBay Inc.

InventorsUpendra S. Mardikar, Jeffrey Meyer

Life of this patent

Estimating the term…

Loading patent…

Abstract

Systems and methods are disclosed for receiving an access request from a user device, the access request including an identity claim for a user; evaluating a risk of access based on matching an attribute of the user device with attributes stored in a user information database; authenticating the access request based on the identity claim and the risk evaluation to determine an authentication confidence level; generating a token based on the confidence level and the attribute matched; producing an authorization response based on inputs from the token, a risk based access control, a role based access control, and an attribute based access control, in which the authorization response determines whether to allow access to a system, deny access to the system, or request additional input from the user device.

Claims20

Dependent claims

A system, the system providing access control for access to the system by an access device, the system comprising:

a server executing a server application for communication with the access device, wherein:
the server application receives an identity claim from the access device;
an authentication service in communication with the server, wherein:
the authentication service receives the identity claim from the server application;
a risk service in communication with the authentication service, wherein:
the risk service provides a risk evaluation to the authentication service based on applying a risk model to the identity claim;
and
the authentication service provides a token to the server application based on the identity claim and the risk evaluation;
and
an authorization service in communication with the server application and the risk service, wherein:
the authorization service receives the token from the server application;
and
the authorization service provides a response whether to allow access to the system by the access device according to input from the token, and input from a risk based access control, a role based access control, and an attribute based access control.

10 more elements

Dependencies are inferred from the claim text.

Facts

Application: 13/226,325Filed 6 Sep 2011
Priority: 3 Sep 2010
Published: 8 Mar 2012
Term ends: Not estimatedThe source records don’t support an estimate.

Classification12 codes

H04L 63/20
Network architectures or network communication protocols for network security: for managing network security; network security policies in general
G06F 21/31
Authentication, i.e. establishing the identity or authorisation of security principals: user authentication
G06F 21/33
User authentication: using certificates
G06F 21/62
Protecting data: protecting access to data via a platform, e.g. using keys or access control rules