Method and system for generating user group identifiers
AssigneeCisco Technology, Inc.
InventorMichael R. Smith
Life of this patent
Estimating the term…
Abstract
A method and apparatus for generating user group identifiers using a permissions matrix is disclosed. The permissions matrix includes an entry that is associated with a row and a column of the permissions matrix. The row of the permissions matrix is indexed with a first role and the column of the permissions matrix is indexed with a second role. A data structure implementing such a method can include, for example, a user group identifier matrix. Alternatively, a method is disclosed in which the expiration of a user group identifier is detected. In such a case, the user group identifier is updated by accessing a user group identifier matrix.
Claims23
A computer-implemented method comprising:
- generating a plurality of user-role relationships, wherein
- the plurality of user-role relationships are generated for a set of entities,
- each entity of the set of entities represents one of a plurality of users,
- the each entity is assigned a role subset from a plurality of role subsets,
- each role subset of the plurality of role subsets comprises one or more roles from a set of roles,
- the plurality of user-role relationships define network access permitted to the each entity, and
- the network access permitted to the each entity is based on the role subset assigned to the each entity;
- and
- assigning a user group identifier to the each role subset of the plurality of role subsets.
A computer-implemented method comprising:
- generating a user group identifier matrix, wherein
- the user group identifier matrix comprises an entry,
- the entry is associated with a row and a column of the user group identifier matrix,
- the row of the user group identifier matrix is configured to be indexed according to a source user group identifier, and
- the column of the user group identifier matrix is configured to be indexed according to a destination user group identifier;
- and
- accessing a user group permissions list, wherein
- the user group permissions list is accessed using the entry in the user group identifier matrix.
A non-transitory computer program product comprising:
- a first set of instructions, executable on a computer system, configured to generate a user group identifier matrix, wherein
- the user group identifier matrix comprises an entry,
- the entry is associated with a row and a column of the user group identifier matrix,
- the row of the user group identifier matrix is configured to be indexed according to a source user group identifier, and
- the column of the user group identifier matrix is configured to be indexed according to a destination user group identifier;
- a second set of instructions, executable on the computer system, configured to access a user group permissions list, wherein
- the user group permissions list is accessed using the entry in the user group identifier matrix;
- and
- a persistent computer readable media, wherein the non-transitory computer program product is encoded in the persistent computer readable media.
An apparatus comprising:
- means for generating a user group identifier matrix, wherein
- the user group identifier matrix comprises an entry,
- the entry is associated with a row and a column of the user group identifier matrix,
- the row of the user group identifier matrix is configured to be indexed according to a source user group identifier, and
- the column of the user group identifier matrix is configured to be indexed according to a destination user group identifier;
- and
- means for accessing a user group permissions list, wherein
- the user group permissions list is accessed using the entry in the user group identifier matrix.
Dependencies are inferred from the claim text.