Method, system and computer program for managing multiple role userid
AssigneeInternational Business Machines Corporation
InventorsFilomena Ferrara, Scol MacLellan
Life of this patent
Estimating the term…
Abstract
In a data processing system it is necessary to make sure that only authorized users have access to system resources and normally not all the users can have access to all and to the same resources. The present invention provides a method and a system for controlling resources, handling multiple authorization roles with a single userID, and allows for movement between the roles without changing identity. This results in a clearer audit trail, and removes the need for extensive knowledge of the security system commands and for multiple steps to allow a step up or down in authorization.
Claims10
A method for controlling user access to a plurality of resources in a data processing system, the data processing system maintaining a set of stored userIDs each userID having a plurality of associated stored passwords, each password being coupled to a predetermined profile defining a set of resource access authorizations, the method including the steps of:
- prompting a user to input a userID;
- prompting the user to input a first password;
- scanning the stored userIDs and the associated stored passwords to identify a match with the input userID and first password;
- responsive to a match being identified selectively granting the user access to the resources according to the predetermined profile coupled to the input first password.
A computer program in a computer readable medium for performing the method for controlling user access to a plurality of resources in a data processing system when the computer program is executed on a data processing system, the data processing system maintaining a set of stored userIDs each userID having a plurality of associated stored passwords, each password being coupled to a predetermined profile defining a set of resource access authorizations, the method including the steps of:
- prompting a user to input a userID;
- prompting the user to input a first password;
- scanning the stored userIDs and the associated stored passwords to identify a match with the input userID and first password;
- responsive to a match being identified selectively granting the user access to the resources according to the predetermined profile coupled to the input first password.
(canceled)
A system method for controlling user access to a plurality of resources in a data processing system the data processing system maintaining a set of stored userIDs each userID having a plurality of associated. stored passwords, each password being coupled to a predetermined profile defining a set of resource access authorizations, comprising:
- means for—prompting a user to input a userID;
- means for—prompting the user to input a first password;
- means for—scanning the stored userIDs and the associated stored passwords to identify a match with the input userID and first password;
- means for—responsive to a match being identified selectively granting the user access to the resources according to the predetermined profile coupled to the input first password.
(canceled)
Dependencies are inferred from the claim text.