SYSTEM AND METHOD FOR DISTRIBUTED ACCESS CONTROL WITH A CENTRALIZED DATABASE

摘要

A system and method for distributed access control. A packet is received at a firewall, which implements a rule and refers the packet to a credential validating proxy. The proxy retrieves a requester profile from an external database and performs a credential validating analysis. Based upon the results of the credential validating analysis, the proxy builds an access rule, which is implemented by the firewall. At the end of the session to which the received packet belongs, the access rule is deleted at the firewall.