Generating customized policy decision point services for controlling access to computing resources
AssigneeRed Hat, Inc.
InventorsLeigh Griffin, Aoife Moloney
Life of this patent
Estimating the term…
Abstract
Customized policy decision point (PDP) services for policy-based access control systems can be generated according to some examples. In one example, a system can select an access control policy to apply to an access request received from a client that is attempting to access a computing resource. In response to selecting the access control policy, the system can select a code block from among a group of code blocks based on the access control policy. The system can then generate a customized PDP service by incorporating the code block into a PDP template, the customized PDP service being configured to execute the code block for applying the access control policy to the access request.
Claims20
A non-transitory computer-readable medium comprising program code that is executable by a processor for causing the processor to:
- select an access control policy to apply to an access request received from a client that is attempting to access a computing resource;
- and
- in response to selecting the access control policy:
- select a code block from among a plurality of code blocks based on the access control policy;
- and
- generate a customized policy decision point (PDP) service by incorporating the code block into a PDP template, the customized PDP service being configured to execute the code block for applying the access control policy to the access request.
A method comprising:
- selecting, by a processor, an access control policy to apply to an access request received from a client that is attempting to access a computing resource;
- and
- in response to selecting the access control policy:
- selecting, by the processor, a code block from among a plurality of code blocks based on the access control policy;
- and
- generating, by the processor, a customized policy decision point (PDP) service by incorporating the code block into a PDP template, the customized PDP service being configured to execute the code block for applying the access control policy to the access request.
A system comprising:
- a processor;
- and
- a non-transitory computer-readable memory comprising instructions that are executable by the processor for causing the processor to:
- select an access control policy to apply to an access request received from a client that is attempting to access a computing resource;
- and
- in response to selecting the access control policy:
- select a code block from among a plurality of code blocks based on the access control policy;
- and
- generate a customized policy decision point (PDP) service by incorporating the code block into a PDP template, the customized PDP service being configured to execute the code block for applying the access control policy to the access request.
Dependencies are inferred from the claim text.