Access control in microservice architectures
US11457014B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | Oct 26, 2017 |
| Grant date | Sep 27, 2022 |
| Priority date | — |
| Expiry date | Jul 25, 2040 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04W12/08
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
A method, system and computer program product relating to an application server operable to manage a microservice-based application, i.e. app, on behalf of clients, the clients being available for use by system actors who may be, for example, end users, bots, developers or other apps. A permissions validator is used to compute effective permissions in response to client requests. The requests are granted or denied conditional on the effective permissions being at least a subset of the permissions required to be given by any of the app's microservices that are needed for the resource being requested. The effective permissions are computed from an intersection of a set of actor permissions, a set of client permissions and a set of resource permissions.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.