FRAMEWORK FOR MAINTAINING INFORMATION SECURITY IN COMPUTER NETWORKS

摘要

A system, (100) is provided for controlling access to information technology assets in a computer network. The system includes a ticket manager server (130) configured to generate tickets based on user data in a master database. A ticket manager client, resident on a workstation (110), is configured to receive tickets from the ticket manager server and distribute resource data obtained from the tickets to network security modules. The user data includes resource registers, each of which has a type field designating a particular security module, resource data for use by the designated security module, and an execution domain field that exclusively designates an execution environment in which the designated security module can use the resource data.