Methods and arrangements for controlling access to resources based on authentication method
AssigneeMicrosoft Corporation
InventorsJohn E. Brezak, Peter T. Brundrett, Richard B. Ward
Life of this patent
Estimating the term…
Abstract
In accordance with certain aspects of the present invention, improved methods and arrangements are provided that improve access control within a computer. The methods and arrangements specifically identify the authentication mechanism/mechanisms, and/or characteristics thereof, that were used in verifying that a user with a unique name is the actual user that the name implies, to subsequently operating security mechanisms. Thus, differentiating user requests based on this additional information provides additional control.
Claims26
A method for use in a computer capable of supporting multiple authentication mechanisms, the method comprising:
- generating at least one indicator associated with and identifying at least one authentication mechanism;
- and
- controlling access to at least one resource based on the indicator.
A computer-readable medium for use in a device capable of supporting multiple authentication mechanisms, the computer-readable medium having computer-executable instructions for performing acts comprising:
- producing at least one indicator that uniquely identifies at least one authentication mechanism supported by the device;
- and
- causing the device to selectively control access to at least one resource operatively coupled to the device based at least in part on the indicator.
An apparatus comprising:
- at least one authentication mechanism configured to generate at least one indicator that identifies the authentication mechanism;
- an access control list;
- at least one access controlled resource;
- and
- logic operatively configured to compare the indicator with the access control list and selectively control access to the resource based on the indicator.
Dependencies are inferred from the claim text.