Data Flow-Oriented Access Control Patent
Summary
The USPTO published patent application US20260095447A1 by inventor Jan HRASTNIK disclosing a system for data flow-oriented access control in service-based architectures. The invention enables services to transmit access contexts to a centralized access control service for validation, which then generates appropriate authorization checks for downstream services. This facilitates consistent authorization enforcement across distributed application stacks.
What changed
The patent application describes a method and system where a first service on an application stack generates a service request with an associated first access context defining authorization checks. This request is transmitted to an access control service that validates the context and returns a second access context with relevant authorization checks for the second service. The second service then executes the request using the provided authorization checks.
Technology companies and software developers implementing service-oriented architectures should review this patent for awareness of data flow access control methodologies. While patents do not impose immediate compliance obligations, this intellectual property may be relevant to teams designing authorization frameworks for distributed systems. No regulatory deadlines or penalties apply to this publication.
Archived snapshot
Apr 3, 2026GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.
DATA FLOW-ORIENTED ACCESS CONTROL
Application US20260095447A1 Kind: A1 Apr 02, 2026
Inventors
Jan HRASTNIK
Abstract
A system and method including generating, by a first service on an application stack, a first service request to invoke a second service, the first service having a first access context associated therewith that defines authorization checks related to functions performed by and data processed by the first service; transmitting the first service request from the first service to an access control service with the first access context; receiving, from the access control service, a second access context defining authorization checks relevant to functions and data processing to be performed by the second service to fulfill the first service request; and transmitting the first service request in combination with the second access control to the second service, the second service being enabled to execute the service request using authorization checks defined in the second access context.
CPC Classifications
H04L 63/10
Filing Date
2024-09-30
Application No.
18901341
Named provisions
Related changes
Get daily alerts for USPTO Patent Applications - Networking (H04L)
Daily digest delivered to your inbox.
Free. Unsubscribe anytime.
Source
About this page
Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission
Source document text, dates, docket IDs, and authority are extracted directly from USPTO.
The plain-English summary, classification, and "what to do next" steps are AI-generated from the original text. Cite the source document, not the AI analysis.
Classification
Who this affects
Taxonomy
Browse Categories
Get alerts for this source
We'll email you when USPTO Patent Applications - Networking (H04L) publishes new changes.