| CPC H04L 63/105 (2013.01) [H04L 63/20 (2013.01)] | 19 Claims |

|
1. A computer system comprising:
one or more resource servers with resources to which access is controlled in accordance with an access-control policy specified in a computer-readable access-control language; and
a centralized authorization server, which is common to the one or more resource servers:
the computer system further comprising:
a first-type policy decision point, PDP, implemented by the centralized authorization server and configured to decide on dynamic policy privileges in accordance with the access-control policy; and
one or more second-type PDPs implemented by respective ones of the one or more resource servers and configured to decide on static policy privileges in accordance with the access-control policy.
|