17525490. SYSTEM AND METHOD OF PROVIDING GRANUAL ACCESS CONTROL simplified abstract (MICROSOFT TECHNOLOGY LICENSING, LLC)

From WikiPatents
Jump to navigation Jump to search

SYSTEM AND METHOD OF PROVIDING GRANUAL ACCESS CONTROL

Organization Name

MICROSOFT TECHNOLOGY LICENSING, LLC

Inventor(s)

Mengke Li of Bellevue WA (US)

Samuel Mberere Kabue of Seattle WA (US)

John Matthew Mangino of Seattle WA (US)

David Minasyan of Bothell WA (US)

Trent Der Green of Seattle WA (US)

SYSTEM AND METHOD OF PROVIDING GRANUAL ACCESS CONTROL - A simplified explanation of the abstract

This abstract first appeared for US patent application 17525490 titled 'SYSTEM AND METHOD OF PROVIDING GRANUAL ACCESS CONTROL

Simplified Explanation

The abstract describes a system and method for providing access to a resource based on user roles and permissions. Here is a simplified explanation of the abstract:

  • The system receives a request from a user device to access a resource and an access token that identifies the user's access role and the task to be performed on the resource.
  • It retrieves the access role from the access token and examines a role-to-permissions map to determine the available permissions for that role.
  • Based on the available permissions, the system determines if the user is authorized to perform the requested task on the resource.
  • It also determines if the user has permission to access the resource managed by an object model.
  • If the user is authorized and has permission, the system allows the user device to access the resource and perform the task.

Potential applications of this technology:

  • Access control systems for various resources such as files, databases, or applications.
  • User management systems in organizations where different roles have different levels of access.
  • Secure login systems that grant access based on user roles and permissions.

Problems solved by this technology:

  • Ensures that users can only access resources and perform tasks that they are authorized to do.
  • Provides a flexible and scalable system for managing user roles and permissions.
  • Reduces the risk of unauthorized access and potential security breaches.

Benefits of this technology:

  • Improved security by controlling access to resources based on user roles and permissions.
  • Efficient management of user access by utilizing an object model to handle permissions.
  • Simplified administration and maintenance of access control systems.


Original Abstract Submitted

A system and method for method for providing access to a resource includes receiving, from a user device of a user, a request to access the resource and an access token, the access token identifying an access role associated with the user and the request identifying a task to be performed on the resource; retrieving the access role from the access token; examining a role-to-permissions map to identify one or more permission available for the access role; determining, based on the available permissions for the access role that the user is authorized to perform the task on the resource; determining, based on the access role and the available permissions that the user has permission to access the resource managed by an object model; and upon determining that the user is authorized to perform the task on the resource and the user has permission to access the resource managed by the object model, permitting the user device of the user to access the resource to perform the task.