Abstract: A system and method are described that are carried out by a core network element of a host mobile carrier core network to perform an access point name resolution to facilitate establishing a session between a user equipment and a target packet gateway (PGW) of a mobile virtual network operator (MVNO). The method includes receiving a connection request from a user equipment identified as falling within particular ranges of mobile subscriber identity number (MSIN) values corresponding to user equipment of hosted MVNOs. The connection request includes: an international mobile subscriber identity (IMSI), and an access point name (APN). The method further includes establishing an MVNO identifier from the provided IMSI and thereafter generating an MVNO-specific APN by appending the MVNO identifier to the APN. The method further includes submitting a name resolution request including the MVNO-specific APN to a naming service server.

Abstract: A method (400) of automatically generating policies and/or roles for role based access (RBAC). The method can include presenting a policy or policy generation table (300) identifying scripts (304) and roles (302) to which the scripts correspond to an operator, and receiving at least one operator input selecting a plurality of desired scripts to be associated with a desired policy or role. The method also can include parsing the scripts to identify corresponding verb-switches (204), and comparing the parsed verb-switches to existing policies or roles (114). When there is at least one of the parsed verb-switches that does not correspond to at least one existing policy, the parsed verb-switch that does not correspond to at least one existing policy can be identified and a policy (106) that includes the identified verb-switch can be generated.

Abstract: A method (400) of automatically generating policies and/or roles for role based access (RBAC). The method can include presenting a policy or policy generation table (300) identifying scripts (304) and roles (302) to which the scripts correspond to an operator, and receiving at least one operator input selecting a plurality of desired scripts to be associated with a desired policy or role. The method also can include parsing the scripts to identify corresponding verb-switches (204), and comparing the parsed verb-switches to existing policies or roles (114). When there is at least one of the parsed verb-switches that does not correspond to at least one existing policy, the parsed verb-switch that does not correspond to at least one existing policy can be identified and a policy (106) that includes the identified verb-switch can be generated.

Abstract: A method for identifying non-orthogonal roles (112, 114, 116, 118) in an access control system (100). The method can include, for at least one policy (Pn,i) defined for a first role (112) in the access control system, automatically determining whether there is at least one policy (Pm,j) defined in a second role that conflicts with the policy defined in the first role. The method also can include, responsive to determining that the policy defined in the second role conflicts with the policy defined in the first role, providing a conflict indicator.