-
公开(公告)号:US08458337B2
公开(公告)日:2013-06-04
申请号:US12135535
申请日:2008-06-09
IPC分类号: G06F15/16 , G06F15/173 , G06F17/30
CPC分类号: H04L63/102 , G06F21/6209 , G06F2221/2141
摘要: Methods and apparatus for providing role-based access control of a resource by a subject in an access control system are provided. The system comprises one or more roles capable of association with one or more subjects, and a plurality of permission sets. One or more of the plurality of permission sets are associated with each of the one or more roles. The system further comprises a plurality of resources. One or more of the plurality of resources are associated with each of the one or more permission sets, and each of the plurality of resources is associated with a set of one or more subjects. A given subject in a set of one or more subjects for a given resource and having a role-permission association with the given resource is provided access control of the given resource.
摘要翻译: 提供了一种用于在访问控制系统中由对象提供基于角色的对资源的访问控制的方法和装置。 该系统包括能够与一个或多个主体相关联的一个或多个角色以及多个权限集合。 多个权限集合中的一个或多个与一个或多个角色中的每一个相关联。 该系统还包括多个资源。 多个资源中的一个或多个与一个或多个许可集合中的每一个相关联,并且多个资源中的每一个与一个或多个主体的集合相关联。 给定资源的一个或多个主题的给定主题和给定资源的角色许可关联提供给定资源的访问控制。
-
公开(公告)号:US20080243856A1
公开(公告)日:2008-10-02
申请号:US12135535
申请日:2008-06-09
IPC分类号: G06F17/30
CPC分类号: H04L63/102 , G06F21/6209 , G06F2221/2141
摘要: Methods and apparatus for providing role-based access control of a resource by a subject in an access control system are provided. The system comprises one or more roles capable of association with one or more subjects, and a plurality of permission sets. One or more of the plurality of permission sets are associated with each of the one or more roles. The system further comprises a plurality of resources. One or more of the plurality of resources are associated with each of the one or more permission sets, and each of the plurality of resources is associated with a set of one or more subjects. A given subject in a set of one or more subjects for a given resource and having a role-permission association with the given resource is provided access control of the given resource.
摘要翻译: 提供了一种用于在访问控制系统中由对象提供基于角色的对资源的访问控制的方法和装置。 该系统包括能够与一个或多个主体相关联的一个或多个角色以及多个权限集合。 多个权限集合中的一个或多个与一个或多个角色中的每一个相关联。 该系统还包括多个资源。 多个资源中的一个或多个与一个或多个许可集合中的每一个相关联,并且多个资源中的每一个与一个或多个主体的集合相关联。 给定资源的一个或多个主题的给定主题和给定资源的角色许可关联提供给定资源的访问控制。
-
公开(公告)号:US20080005115A1
公开(公告)日:2008-01-03
申请号:US11479356
申请日:2006-06-30
IPC分类号: G06F17/30
CPC分类号: H04L63/102 , G06F21/6209 , G06F2221/2141
摘要: Methods and apparatus for providing role-based access control of a resource by a subject in an access control system are provided. The system comprises one or more roles capable of association with one or more subjects, and a plurality of permission sets. One or more of the plurality of permission sets are associated with each of the one or more roles. The system further comprises a plurality of resources. One or more of the plurality of resources are associated with each of the one or more permission sets, and each of the plurality of resources is associated with a set of one or more subjects. A given subject in a set of one or more subjects for a given resource and having a role-permission association with the given resource is provided access control of the given resource.
摘要翻译: 提供了一种用于在访问控制系统中由对象提供基于角色的对资源的访问控制的方法和装置。 该系统包括能够与一个或多个主体相关联的一个或多个角色以及多个权限集合。 多个权限集合中的一个或多个与一个或多个角色中的每一个相关联。 该系统还包括多个资源。 多个资源中的一个或多个与一个或多个许可集合中的每一个相关联,并且多个资源中的每一个与一个或多个主体的集合相关联。 给定资源的一个或多个主题的给定主题和给定资源的角色许可关联提供给定资源的访问控制。
-
公开(公告)号:US08635328B2
公开(公告)日:2014-01-21
申请号:US10286611
申请日:2002-10-31
IPC分类号: G06F15/173
CPC分类号: H04L43/16 , H04L41/0213 , H04L41/064 , H04L41/147
摘要: A method and apparatus for determining time-varying thresholds for measured metrics are provided. With the method and apparatus, values of a given metric are captured over time. The behavior of the metric is analyzed to determine its seasonality. Correlated historical values of the metric and additional related metrics (cross-correlation) are used as inputs to a feed-forward back propagation neural network, in order to train the network to generalize the behavior of the metric. From this generalized behavior, point-by-point threshold values are calculated. The metric is monitored and the monitored values are compared with the threshold values to determine if the metric has violated its normal time-varying behavior. If so, an event is generated to notify an administrator of the error condition.
摘要翻译: 提供了一种用于确定测量度量的时变阈值的方法和装置。 使用方法和装置,随着时间的推移捕获给定度量的值。 分析度量的行为以确定其季节性。 将度量和附加相关度量(互相关)的相关历史值用作前馈反向传播神经网络的输入,以便训练网络来推广度量的行为。 根据这种广义行为,计算逐点阈值。 监测度量,并将监测值与阈值进行比较,以确定度量是否违反了其正常的时变行为。 如果是这样,则生成一个事件来通知管理员错误状况。
-
-
-