ATTRIBUTE ORIENTED ENTERPRISE ACCESS PROTOCOL BASED ON A COMMON INFORMATION MODEL

摘要

The present invention discloses a method and system for unified access control to a plurality of applications by a set of users in an enterprise through a common information model. The method includes the steps of defining a uniform enterprise access control policy according to the logical common information model for the set of users in the enterprise, and creating a translation layer an a rules layer mapping definition for mapping the application entities and attributes to the business entities and attributes. The method and system of the present invention simplifies creation of uniform access control security policies for enterprise attributes and entities across disparate data sources and applications. Also, the present invention provides fine-grained access control mechanism in a standardized manner across a myriad of different data sources and applications within an enterprise.