首页>
外国专利>
Context-based security policy evaluation using weighted search trees
Context-based security policy evaluation using weighted search trees
展开▼
机译:使用加权搜索树的基于上下文的安全策略评估
展开▼
页面导航
摘要
著录项
相似文献
摘要
A method, apparatus and computer program product for evaluating a context-based (e.g., XACML) policy having a set of attributes using a weighted index tree having one or more leaves extending from a root node. Each leaf of the tree represents a policy rule. A depth-first path down the leaf represents one or more attributes of the set of attributes that must be present in a request for the rule to be applicable. An input is evaluated against the weighted index tree to generate a response. One type of input is an authorization request, in which case the response is an authorization decision (e.g., permit or deny). Another type of input is a query for a set of entitlements, in which case the response is a set of entitlements.
展开▼