Abstract: A computer system including: one or more resource servers with resources, to which access is controlled in accordance with an access-control policy specified in a computer-readable access-control language, and a centralized authorization server, which is common to the resource servers and implements a second-type policy decision point. The computer system further includes a first-type policy decision point, which is implemented by the authorization server and configured to decide on dynamic policy privileges, and one or more second-type policy decision points, which are implemented by respective ones of the resource servers and configured to decide on static policy privileges.

Abstract: A method for managing access control within a modular automation system including at least two automation modules. Each automation module is associated with an operation or a set of operations for carrying out a specific task. The method includes: receiving a schema of a common process including at least the order of processing steps of the modular automation system, wherein each processing step includes one or more of the specific tasks of the automation modules; generating privilege associations for each processing step with one or more automation modules, based on the schema; and generating an access control policy for the automation modules based on the privilege associations.

Abstract: A computer system including: one or more resource servers with resources, to which access is controlled in accordance with an access-control policy specified in a computer-readable access-control language, and a centralized authorization server, which is common to the resource servers and implements a second-type policy decision point. The computer system further includes a first-type policy decision point, which is implemented by the authorization server and configured to decide on dynamic policy privileges, and one or more second-type policy decision points, which are implemented by respective ones of the resource servers and configured to decide on static policy privileges.

Abstract: A method for managing access control within a modular automation system including at least two automation modules. Each automation module is associated with an operation or a set of operations for carrying out a specific task. The method includes: receiving a schema of a common process including at least the order of processing steps of the modular automation system, wherein each processing step includes one or more of the specific tasks of the automation modules; generating privilege associations for each processing step with one or more automation modules, based on the schema; and generating an access control policy for the automation modules based on the privilege associations.