Rule Based Security Policy Enforcement

Abstract

A rules based system enforces security policies in a data access management system. The rules based system provides rules that preclude certain activities, but those rules are only implemented and fired upon certain conditions occurring. This results in certain actions being precluded when specified conditions are true, without additional software required to check for the condition each time the action is requested.

1 . A method of enforcing security policies in a data access system, said data access system having data access management software in program memory, said method comprising: 
 defining a first condition;    upon occurrence of said first condition, placing a rule into data access management software in said data access system, said rule testing for a second condition and precluding an action if said second condition is present, said rule being stored remotely and only loaded into program memory for the duration of said first condition, said rule being placed into data access management and removed therefrom at times independent of when a particular user logs on or logs off.