US7958206B2 - Controlling Access Rights to Network Resources Based on a Hierarchical Arrangement of Security Sets