creator Frieder, Ophir creator Ren, Shangping The present invention can enable increasing refinement of role-based permission to access data within a Role Based Access Control (RBAC) controlled computer system by enabling constraints to be written on the role-based permissions. The constraints may utilize each and every type or combination of subject, object, or environment information extracted from sources internal or external to the controlled computer system and may evaluate the content or context of the information extracted to enable refined and dynamic access after the role permission assignment and immediately before every access grant without the reassignment of roles. Submitted by Aric Ahrens (ahrens@iit.edu) on 2012-09-19T20:59:48Z No. of bitstreams: 1 8271527.pdf: 112384 bytes, checksum: 7851dc4e6271c5df46c7028e5d1975dc (MD5) Made available in DSpace on 2012-09-19T20:59:49Z (GMT). No. of bitstreams: 1 8271527.pdf: 112384 bytes, checksum: 7851dc4e6271c5df46c7028e5d1975dc (MD5) Previous issue date: 2012-09-18 Illinois Institute of Technology 2012-09-19 2012-09-18 8,271,527 http://hdl.handle.net/10560/2883 en United States Patent Primary US Patent Classification 707/783 International Patent Classification G06F 17/30 Patent reformatted digital application/pdf No Copyright - United States http://rightsstatements.org/page/NoC-US/1.0/ Open Access