Virtual attribute federation system

A method for virtual attribute federation, the method comprising:

• federating, by a virtual attribute federation manager (VAFM), a same instance of a virtual attribute across each of a plurality of virtual attribute enabled directories (VAEDs), wherein at least one of the VAEDs is in a different domain and has a different directory structure than at least one other of the VAEDs, by mapping, for the virtual attribute according to a given value calculation method, a federated instance external to the VAEDs to a local instance internal to the VAEDs, wherein the VAFM signs the virtual attribute and value calculation method with a digital signature, wherein each VAED is configured to execute the virtual attribute and value calculation method in response to a recognition by the VAED of the signature of the virtual attribute and value calculation method, and wherein the value calculation method is executed in a restricted environment where the virtual calculation method retrieves information through an attribute store of the VAED and a set of external ports according to a resource map, the restricted environment being abstracted by the resource map and external ports and the restricted environment preventing the value calculation method from transmitting information outside of the VAED, reading information outside of the VAED except through the set of external ports, changing information in the attribute store, and accessing information that an executing user identity does not have access to from outside the VAED;
• managing, by the VAFM, of directories;
• managing, by the VAFM, of data sources;
• communicating, via a Federated Attribute Interface (FAI), changes of the virtual attributes.

A computer-readable storage device, wherein the storage device is not a transitory signal, storing computer instructions, which, when executed, enables a system operating for virtual attribute federation, to perform steps comprising:

• federating, by a virtual attribute federation manager (VAFM), a same instance of a virtual attribute across each of a plurality of virtual attribute enabled directories (VAEDs), wherein at least one of the VAEDs is in a different domain and has a different directory structure than at least one other of the VAEDs, by mapping, for the virtual attribute according to a given value calculation method, a federated instance external to the VAEDs to a local instance internal to the VAEDs, wherein the VAFM signs the virtual attribute and value calculation method with a digital signature, wherein each VAED is configured to execute the virtual attribute and value calculation method in response to a recognition by the VAED of the signature of the virtual attribute and value calculation method, and wherein the value calculation method is executed in a restricted environment where the virtual calculation method retrieves information through an attribute store of the VAED and a set of external ports according to a resource map, the restricted environment being abstracted by the resource map and external ports and the restricted environment preventing the value calculation method from transmitting information outside of the VAED, reading information outside of the VAED except through the set of external ports, changing information in the attribute store, and accessing information that an executing user identity does not have access to from outside the VAED;
• managing, by the VAFM, of directories;
• managing, by the VAFM, of data sources;
• communicating, via a Federated Attribute Interface (FAI), changes of the virtual attributes.

A method for deploying a system for virtual attribute federation, the method comprising:

• federating, by a virtual attribute federation manager (VAFM), a same instance of a virtual attribute across each of a plurality of virtual attribute enabled directories (VAEDs), wherein at least one of the VAEDs is in a different domain and has a different directory structure than at least one other of the VAEDs, by mapping, for the virtual attribute according to a given value calculation method, a federated instance external to the VAEDs to a local instance internal to the VAEDs, wherein the VAFM signs the virtual attribute and value calculation method with a digital signature, wherein each VAED is configured to execute the virtual attribute and value calculation method in response to a recognition by the VAED of the signature of the virtual attribute and value calculation method, and wherein the value calculation method is executed in a restricted environment where the virtual calculation method retrieves information through an attribute store of the VAED and a set of external ports according to a resource map, the restricted environment being abstracted by the resource map and external ports and the restricted environment preventing the value calculation method from transmitting information outside of the VAED, reading information outside of the VAED except through the set of external ports, changing information in the attribute store, and accessing information that an executing user identity does not have access to from outside the VAED;
• managing, by the VAFM, of directories;
• managing, by the VAFM, of data sources;
• communicating, via a Federated Attribute Interface (FAI), changes of the virtual attributes to the local instance internal to the VAEDs.