Apparatus and method for making access decision using exceptions
AssigneeBank of America Corporation
InventorRakesh Radhakrishnan
Life of this patent
Estimating the term…
Abstract
According to one embodiment, an apparatus may store a plurality of token-based exceptions The apparatus may receive a resource token indicating that access to the resource has been requested. The apparatus may determine, based at least in part upon the resource token, at least one token-based exception. The token-based exception further may condition the grant of access to the resource upon the apparatus determining that the plurality of tokens comprises the at least one token. The apparatus may determine that the plurality of tokens does not comprise the at least one token and determine, in response to the determination that the plurality of tokens does not comprise the at least one token, that access to the resource should be denied.
Claims18
An apparatus comprising:
- a memory operable to:
- store a plurality of token-based rules, wherein a token-based rule facilitates access to a resource;
- store a plurality of token-based exceptions to the plurality of token-based rules, wherein a token-based exception facilitates access to the resource;
- and
- store a plurality of tokens;
- and
- a processor communicatively coupled to the memory and operable to:
- receive a resource token indicating that access to the resource has been requested;
- determine, based at least in part upon the resource token, at least one token-based exception, wherein:
- the at least one token-based exception indicates at least one token;
- and
- the token-based exception further conditions the grant of access to the resource upon the processor determining that the plurality of tokens comprises the at least one token;
- determine that the plurality of tokens does not comprise the at least one token;
- determine, in response to the determination that the plurality of tokens does not comprise the at least one token, that access to the resource should be denied.
A method comprising:
- storing, by a memory, a plurality of token-based rules, wherein a token-based rule facilitates access to a resource;
- storing, by the memory, a plurality of token-based exceptions to the plurality of token-based rules, wherein a token-based exception facilitates access to the resource;
- and
- storing, by the memory, a plurality of tokens;
- and
- receiving, by a processor communicatively coupled to the memory, a resource token indicating that access to the resource has been requested;
- determining, by the processor, based at least in part upon the resource token, at least one token-based exception, wherein:
- the at least one token-based exception indicates at least one token;
- and
- the token-based exception further conditions the grant of access to the resource upon the processor determining that the plurality of tokens comprises the at least one token;
- determining, by the processor, that the plurality of tokens does not comprise the at least one token;
- determining, by the processor, in response to the determination that the plurality of tokens does not comprise the at least one token, that access to the resource should be denied.
One or more computer-readable non-transitory storage media embodying software that is operable when executed to:
- store a plurality of token-based rules, wherein a token-based rule facilitates access to a resource;
- store a plurality of token-based exceptions to the plurality of token-based rules, wherein a token-based exception facilitates access to the resource;
- and
- store a plurality of tokens;
- and
- receive a resource token indicating that access to the resource has been requested;
- determine, based at least in part upon the resource token, at least one token-based exception, wherein:
- the at least one token-based exception indicates at least one token;
- and
- the token-based exception further conditions the grant of access to the resource upon the processor determining that the plurality of tokens comprises the at least one token;
- determine that the plurality of tokens does not comprise the at least one token;
- determine, in response to the determination that the plurality of tokens does not comprise the at least one token, that access to the resource should be denied.
Dependencies are inferred from the claim text.