A method and system for registration, authorization, and control of access rights in a computer system. Access rights of subjects on objects in a computer system are controlled using parameterized role types that can be instantiated into role instances equivalent to roles or groups. The required parameters...http://www.google.com/patents/US5911143?utm_source=gb-gplus-sharePatent US5911143 - Method and system for advanced role-based access control in distributed and centralized computer systems
