Controlling access to computer resources
AssigneePalantir Technologies Inc.
InventorsBabak Siavoshy, Kyle Owens, Nathaniel Edwards
Life of this patent
Estimating the term…
Abstract
A system is described for controlling access to resources using an object model. Users can specify use cases for accessing resources. The user may be granted access if the user satisfies qualifications required for accessing the resource, selected a use case permissible for accessing the resource, and satisfies qualifications required for the use case. Use cases, qualifications, resources, and/or links between them can be implemented using an object model. The system can be used in addition to authentication and authorization.
Claims20
A computer-implemented method of managing access to computer resources, the method comprising:
- by one or more processors configured to execute computer instructions:
- receiving, from a first entity, a selection of a first purpose, wherein the first purpose is indicated by a first use case object;
- and
- in response to receiving the selection of the first purpose:
- determining a plurality of computer resources associated with the first use case object;
- determining authorizations of the first entity for the first plurality of computer resources;
- and
- providing the first entity with access to the first plurality of computer resources in accordance with the determined authorizations.
A computer system for managing access to computer resources, the computer system comprising:
- one or more computer readable storage devices storing a plurality of computer readable instructions;
- and
- one or more processors configured to execute the plurality of computer readable instructions to cause the computer system to perform operations comprising:
- receiving, from a first entity, a selection of a first purpose, wherein the first purpose is indicated by a first use case object;
- and
- in response to receiving the selection of the first purpose:
- determining a plurality of computer resources associated with the first use case object;
- determining authorizations of the first entity for the first plurality of computer resources;
- and
- providing the first entity with access to the first plurality of computer resources in accordance with the determined authorizations.
A computer-implemented method of managing access to computer resources, the method comprising:
- by one or more processors configured to execute computer instructions:
- receiving, from a first user, a selection of a first purpose, wherein the first purpose is indicated by a first use case object;
- and
- in response to receiving the selection of the first purpose:
- determining a first plurality of resource objects linked to the first use case object;
- determining authorizations of the first user for a first plurality of computer resources indicated by the first plurality of resource objects;
- determining that qualifications of the first user satisfy a first qualification of a first qualification object that is linked to the first use case object;
- and
- based at least in part on determining that the qualifications of the first user satisfy the first qualification, and further based at least in part on the determined authorizations of the first user for the first plurality of computer resources, providing the first user with access to the first plurality of computer resources indicated by the first plurality of resource objects.
Dependencies are inferred from the claim text.