Method and apparatus for comparing access control lists for configuring a security policy on a network
US7636937B1 · kind B1 · utility
13Cited by
36References
16Claims
0Family size
Assignee
Inventors
Key dates
| Filing date | Jan 11, 2002 |
| Grant date | Dec 22, 2009 |
| Priority date | — |
| Expiry date | Dec 6, 2023 |
Classification
- Technology area (CPC G)Physics
- CPC primaryG06F21/604
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
Two or more access control lists that are syntactically or structurally different may be compared for functional or semantic equivalence in order to configure a security policy on a network. A first access control list is programmatically determined to be functionally equivalent to a second access control list for purpose of configuring or validating security policies on a network. In one embodiment, a box data representation facilitates comparing entries and sub-entries of the lists.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.