Methods And Devices For Controlling Access To Distributed Resources
Access to distributed resources of a network may be controlled by access control data structures that may be customized for a given user or application by taking into consideration a plurality of factors, such as the users and applications seeking access, and the status of a given user or application session. A combination of such parameters may dictate a strict or lenient authentication process.
1 . A method for controlling access to distributed resources comprising:
determining a session status at a device within a cloud-based network;
determining an authentication process based on the determined session status in accordance with an access control data structure; and
controlling access to one or more distributed resources based on the data structure.
2 . The method as in claim 1 wherein the access control data structure comprises one or more access control lists.
3 . The method as in claim 1 further comprising:
receiving the access control data structure at the device; and
associating the received access control data structure with an operating system (OS) of the device.
4 . The method as in claim 1 further comprising granting or denying a user or application access to the one or more distributed resources based on the access control data structure.
5 . The method as in claim 4 wherein the application comprises a content distribution application.
6 . The method as in claim 1 further comprising:
determining a next session status;
determining a next authentication process based on the determined next session status in accordance with the access control data structure; and
controlling access to the one or more distributed resources based on the access control data structure.
7 . The method as in claim 1 further comprising selecting a specific access control data structure over a less specific data structure upon detection of a conflict between data structures.
8 . The method as in claim 1 wherein the device is selected from the group consisting of at least a local device, and a network device.
9 . The method as in claim 3 , wherein the OS is selected from the group consisting of at least a Linux based OS, a UNIX based OS, a Microsoft based OS, and an Apple based OS.
10 . The method as in claim 1 further comprising receiving content at the device from one or more additional devices within the cloud-based network.
11 . A method for controlling access to distributed resources comprising:
generating an access control data structure at a device within a cloud-based network, the structure associated with one or more parameters selected from the group consisting of at least users, applications, authentication processes and distributed resources; and
distributing the access control data structure to one or more additional devices within the cloud-based network.
12 . The method as in claim 11 further comprising distributing a portion of the access control data structure to one of the additional devices within the cloud-based network.
13 . The method as in claim 11 wherein the access control data structure comprises one or more access control lists.
14 . The method as in claim 11 wherein the one or more additional devices are selected from the group consisting of at least local devices, and network devices.
15 . The method as in claim 11 wherein the device is selected from the group consisting of at least a local device, and a network device.
16 . The method as in claim 11 wherein one of the applications comprises a content distribution application.
17 . The method as in claim 11 further comprising distributing content to the one or more additional devices.
18 . A device for controlling access to distributed resources, the device operable to:
determine a session status;
determine an authentication process based on the determined session status in accordance with an access control data structure; and
control access to one or more distributed resources based on the data structure.
19 . The device as in claim 18 wherein the access control data structure comprises one or more access control lists.
20 . The device as in claim 19 further operable to:
receive the access control data structure; and
associate the received access control data structure with an operating system (OS).
21 . The device as in claim 18 further operable to grant or deny a user or application access to the one or more distributed resources based on the access control data structure.
22 . The device as in claim 21 wherein the application comprises a content distribution application.
23 . The device as in claim 18 further operable to:
determine a next session status;
determine a next authentication process based on the determined next session status in accordance with the access control data structure; and
control access to the one or more distributed resources based on the access control data structure.
24 . The device as in claim 18 further operable to select a specific access control data structure over a less specific data structure upon detection of a conflict between data structures.
25 . The device as in claim 18 wherein the device is selected from the group consisting of at least a local device, and a network device.
26 . The device as in claim 20 , wherein the OS is selected from the group consisting of at least a Linux based OS, a UNIX based OS, a Microsoft based OS, and an Apple based OS.
27 . The device as in claim 18 further operable to receive content from one or more additional devices within the cloud-based network.
28 . A device for controlling access to distributed resources, the device operable to:
generate an access control data structure, the structure associated with one or more parameters selected from the group consisting of at least users, applications, authentication processes and distributed resources; and
distribute the access control data structure to one or more additional devices within a cloud-based network.
29 . The device as in claim 28 further operable to distribute a portion of the access control data structure to one of the additional devices within the cloud-based network.
30 . The device as in claim 28 wherein the access control data structure comprises one or more access control lists.
31 . The device as in claim 28 wherein the one or more additional devices are selected from the group consisting of at least local devices, and network devices.
32 . The device as in claim 28 wherein the device is selected from the group consisting of at least a local device, and a network device.
33 . The device as in claim 28 wherein one of the applications comprises a content distribution application.
34 . The device as in claim 28 further operable to distribute content to the one or more additional devices.