| 摘要 |
<p>Embodiments of the invention are concerned with an access control system. In a first aspect, the access control system is directed towards controlling network access by an application running on the client device. Ina second aspect, the access control system is directed towards controlling access to services within a network, using known single sign on technology such as Kerberos (TM). A unifying feature of both access control systems is that access is controlled on the basis of an identifier corresponding to the application running on the client device. This identifier is known to the client device and to (a) device(s) configured within the network by means of an application provisioning process.</p> |
