The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Mar. 16, 2021

Filed:

May. 30, 2019
Applicant:

Oracle International Corporation, Redwood Shores, CA (US);

Inventors:

Helali Bhuiyan, Redmond, WA (US);

Daniel M. Vogel, Seattle, WA (US);

Assignee:

Oracle International Corporation, Redwood Shores, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 21/62 (2013.01); G06F 16/901 (2019.01); G06F 40/47 (2020.01); G06F 40/211 (2020.01); G06F 40/253 (2020.01); H04L 29/06 (2006.01);
U.S. Cl.
CPC ...
G06F 21/6218 (2013.01); G06F 16/9024 (2019.01); G06F 40/211 (2020.01); G06F 40/253 (2020.01); G06F 40/47 (2020.01); H04L 63/10 (2013.01); H04L 63/20 (2013.01);
Abstract

Techniques for generating syntax graphs corresponding to user-defined policy statement are disclosed. In one or more embodiments, a policy management service receives a user-defined policy statement that includes a requestor variable value, an action variable value, a resource variable value, and a location variable value. The user-defined policy statement describes an authorization policy. The policy authorization service converts the user-defined policy statement to a canonical policy statement, which involves: mapping the requestor variable value to a unique system-wide requestor identifier, and mapping the location variable value to a unique system-wide location identifier. The policy management service generates a syntax graph of the canonical policy statement. The syntax graph is traversable to determine whether the authorization policy is satisfied for a particular authorization request. The policy management service stores the syntax graph for use by an authorization service.


Find Patent Forward Citations

Loading…