Loading patent…
AssigneeMicrosoft Technology Licensing, LLC
InventorsArash VAHIDNIA, Vasundhara PUTTAGUNTA, Rajalakshmi DANI, Anand Madhava MENON, Neha ARORA, Himani ARORA, Richa SEHGAL, Rufino Louie MAYOR, JR., Sanjoyan MUSTAFI, Himanshu JINDAL, Sumit Kumar CHAUHAN, Caleb Geoffrey BAKER, Nikhil Reddy BOREDDY, Shuvam Singha ROY
Estimating the term…
Some embodiments control access by applications to resources in a computing environment. An embodiment notes a request from an application to access a resource, determines a compliance status of the application based on access control policy compliance criteria, ascertains an authorization status of the request based on an authorization credential of the request and an authorization requirement of the resource, and responds to the request based on the compliance status and also based on the authorization status, thereby providing fine-grained access control. Access may also be controlled based on a request's beneficiary. An access request response may allow access, deny access, or ask for additional authorization. A compliance classifier reduces risk by dynamically updating compliance status after compliance criteria changes or attribute changes. An identity service access control architecture uses a compliance attribute to improve efficiency. Applications may be access control grouped according to resource sensitivity labels.
A system which is configured to perform resource access control, the system comprising:
A method for controlling access by an application to a resource, the method performed by a computing system, the method comprising:
A computer-readable storage device configured with data and instructions which upon execution by a processor cause a computing system to perform a method for controlling access by an application to a resource in a cloud, the method comprising:
Dependencies are inferred from the claim text.