Access control in client-server systems

摘要

A telecommunications network and a method of operating the same. The network is shared by two or more organizations, the network including at least a server and a client. The server is adapted to transmit to the client a proxy communications object comprising a definition of the rights and privileges of an organization to use the network. When the organization initiates a request to the server it does so via the proxy object on the client. The proxy object enables a comparison of the contents of request and the definition of the rights and privileges and enables forwarding of the request to the server only when the request and the rights and privileges granted to the requesting organization are consistent with each other. The request relates to modification of a management object maintained at a network resource, the organization having a global right to access the network resource.

主权项

1. A method of operating a server in a telecommunication network for shared use by at least two user sets, the network comprising the server and a plurality of clients, each client being associated with one of the user sets, the method comprising:
generating a privilege definition object for each user set, the privilege definition object defining at least one network use privilege of its associated user set; and distributing, from the server to at least one client associated with a user set, at least one component of a proxy communications object, each distributed component of a proxy communications object inheriting, from the privilege definition object, a definition of the at least one network use privilege of the user set associated with the client.