Method for providing access control to single sign-on computer networks
AssigneeInternational Business Machines Corporation
InventorsPaul T. Baffes, John Michael Garrison, Michael Gilfix, Allan Hsu, Tyron Jerrod Stading
Life of this patent
Estimating the term…
Abstract
A method for providing access control to a single sign-on computer network is disclosed. A user is assigned to multiple groups within a computer network. In response to an access request by the user, the computer network determines a group pass count based on a user profile of the user. The group pass count is a number of groups in which the access request meets all their access requirements. The computer network grants the access request if the group pass count is greater than a predetermined high group pass threshold value.
Claims18
A method for providing access control to a single sign-on computer network, said method comprising:
- associating a user to a plurality of groups;
- in response to an access request by said user, determining a group pass count based on a user profile of said user, wherein said group pass count is a number of said plurality of groups in which the access requirement that said access request has to meet;
- and
- granting said access request if said group pass count is greater than a predetermined high group pass threshold value.
A computer program product residing on a computer usable medium for providing access control to a single sign-on computer network, said computer program product comprising:
- program code means for associating a user to a plurality of groups;
- program code means for determining a group pass count based on a user profile of said user in response to an access request by said user, wherein said group pass count is a number of said plurality of groups in which the access requirement that said access request has to meet;
- and
- program code means for granting said access request if said group pass count is greater than a predetermined high group pass threshold value.
A data processing system capable of providing access control to a single sign-on computer network, said data processing system comprising:
- means for associating a user to a plurality of groups;
- means for determining a group pass count based on a user profile of said user in response to an access request by said user, wherein said group pass count is a number of said plurality of groups in which the access requirement that said access request has to meet;
- and
- means for granting said access request if said group pass count is greater than a predetermined high group pass threshold value.
Dependencies are inferred from the claim text.