Controlling resource access based on resource properties

US9038168B2 · kind B2 · utility

Assignee

• MICROSOFT TECHNOLOGY LICENSING, LLC · US

Inventors

• Nir Ben-Zvi · Redmond, US
• Raja Pazhanivel Perumal · Issaquah, US
• Anders Samuelsson · Sundsvall, SE
• Jeffrey B. Hamblin · Redmond, US
• Ran Kalach · Bellevue, US
• Ziquan Li · Redmond, US
• Matthias H. Wollnik · Seattle, US
• Clyde Law · Seattle, US
• Paul Adrian Oltean · Redmond, US

Key dates

• Filing date: Nov 20, 2009
• Grant date: May 19, 2015
• Expiry date: Nov 27, 2031

Classification

• Technology area (CPC G): Physics
• CPC primary: G06F2221/2141
• WIPO field: Computer technology
• WIPO sector: Electrical engineering

Abstract

Described is a technology by which access to a resource is determined by evaluating a resource label of the resource against a user claim of an access request, according to policy decoupled from the resource. The resource may be a file, and the resource label may be obtained by classifying the file into classification properties, such that a change to the file may change its resource label, thereby changing which users have access to the file. The resource label-based access evaluation may be logically combined with a conventional ACL-based access evaluation to determine whether to grant or deny access to the resource.