Privilege graph-based representation of data access authorizations
AssigneeCookie.AI, Inc.
InventorsTarun Thakur, Maohua Lu
Life of this patent
Estimating the term…
Abstract
The technology disclosed herein enables representation of data access authorizations using a privilege graph. In a particular embodiment, a method includes identifying first attributes of a first user. The method further includes traversing nodes of a privilege graph using the first attributes to determine subsequent nodes until one or more nodes representing a first subset of environments of a plurality of data environments is reached. The method also includes authorizing the first user to access the first subset.
Claims20
A method for privilege graph-based representation of data access authorizations, the method comprising:
- identifying first attributes of a first user;
- traversing nodes of a privilege graph using the first attributes to determine subsequent nodes until one or more nodes representing a first subset of environments of a plurality of data environments is reached;
- and
- authorizing the first user to access the first subset.
An apparatus comprising:
- one or more computer readable storage media;
- a processing system operatively coupled with the one or more computer readable storage media;
- and
- program instructions stored on the one or more computer readable storage media that, when read and executed by the processing system, direct the processing system to:
- identify first attributes of a first user;
- traverse nodes of a privilege graph using the first attributes to determine subsequent nodes until one or more nodes representing a first subset of environments of a plurality of data environments is reached;
- and
- authorize the first user to access the first subset.
One or more computer readable storage media having program instructions stored thereon that, when read and executed by a processing system, direct the processing system to:
- identify first attributes of a first user;
- traverse nodes of a privilege graph using the first attributes to determine subsequent nodes until one or more nodes representing a first subset of environments of a plurality of data environments is reached;
- and
- authorize the first user to access the first subset.
Dependencies are inferred from the claim text.