公开(公告)号：US10027551B1

公开(公告)日：2018-07-17

申请号：US15696094

申请日：2017-09-05

Applicant: Palantir Technologies, Inc.

Inventor： Neil Rickards ,  James Baker ,  Marco Gelmi ,  Radu-Cosmin Balan ,  Savino Sguera

IPC: G06F15/16 ,  H04L12/24 ,  H04L29/08 ,  H04L29/06

Abstract: Techniques for implementing a node-based access control system are described herein. In an embodiment, a server computer stores a node based policy system wherein each node identifies a resource and a policy for the resource. The server computer identifies a policy for a first node and an identifier of a second node wherein the second node is a parent node to the first node. The server computer maps an effective policy identifier to the policy for the first node and the identifier of the second node. The server computer stores data associating the effective policy identifier with the first node. The server computer identifies a policy for a third node and an identifier of the second node, wherein the second node is a parent node to the third node and wherein the policy for the third node is equivalent to the policy for the first node. The server computer then stores data associating the effective policy identifier with the third node.

公开(公告)号：US10432469B2

公开(公告)日：2019-10-01

申请号：US16009120

申请日：2018-06-14

Applicant: Palantir Technologies Inc.

Inventor： Neil Rickards ,  James Baker ,  Marco Gelmi ,  Radu-Cosmin Balan ,  Savino Sguera

IPC: G06F15/16 ,  H04L12/24 ,  H04L29/08 ,  H04L29/06 ,  G06F21/00 ,  G06F21/60 ,  G06F21/62

Abstract: Techniques for implementing a node-based access control system are described herein. In an embodiment, a server computer stores a node based policy system wherein each node identifies a resource and a policy for the resource. The server computer identifies a policy for a first node and an identifier of a second node wherein the second node is a parent node to the first node. The server computer maps an effective policy identifier to the policy for the first node and the identifier of the second node. The server computer stores data associating the effective policy identifier with the first node. The server computer identifies a policy for a third node and an identifier of the second node, wherein the second node is a parent node to the third node and wherein the policy for the third node is equivalent to the policy for the first node. The server computer then stores data associating the effective policy identifier with the third node.

公开(公告)号：US20190007271A1

公开(公告)日：2019-01-03

申请号：US16009120

申请日：2018-06-14

Applicant: Palantir Technologies Inc.

Inventor： Neil Rickards ,  James Baker ,  Marco Gelmi ,  Radu-Cosmin Balan ,  Savino Sguera

IPC: H04L12/24 ,  H04L29/06 ,  H04L29/08

CPC classification number: H04L41/0893 ,  G06F21/604 ,  G06F21/6218 ,  G06F21/6227 ,  G06F2221/2141 ,  H04L41/12 ,  H04L63/104 ,  H04L63/105 ,  H04L65/608 ,  H04L67/10

Abstract: Techniques for implementing a node-based access control system are described herein. In an embodiment, a server computer stores a node based policy system wherein each node identifies a resource and a policy for the resource. The server computer identifies a policy for a first node and an identifier of a second node wherein the second node is a parent node to the first node. The server computer maps an effective policy identifier to the policy for the first node and the identifier of the second node. The server computer stores data associating the effective policy identifier with the first node. The server computer identifies a policy for a third node and an identifier of the second node, wherein the second node is a parent node to the third node and wherein the policy for the third node is equivalent to the policy for the first node. The server computer then stores data associating the effective policy identifier with the third node.