The Boeing Company

Stephen A Ridlon

Michael Robert Anderson

David J Finton

Paul L Allen

Ming-Yuh Huang

Charles Theodore Kitzmiller

Phyllis Melvin

Keith Williamson

James P Tjelle

Richard V Robinson

A method of implementing requirements applicable to systems of an enterprise includes modeling the requirements as contents of policies applicable to target domains of the enterprise. The policy contents are integrated into a policy model. The policy model is adapted to obtain representations of domain-specific requirements corresponding to target systems in the target domains. The representations are integrated with the corresponding target systems to implement the domain-specific requirements.

Global policy apparatus and related methods

A method of defining policies for controlling access to resources of a system. Authorization requirements for the system are modeled to obtain a model expressing each of a plurality of access control policies as a constraint. From the model is generated a single policy set in an authorization markup language that captures the requirements. This method can be used to define role-based access control policies in a format that can be adapted for input to a variety of access control mechanisms. This generative approach to access control design allows maintenance to be performed at the requirements level.

Defining consistent access control policies

Growing community of inventors

Issaquah, WA, United States of America

Stephen A Ridlon