# US 2016/0366144 A1 · System Security Using Multi-user Control

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2016/0366144 A1
- Document ID: US20160366144A1
- Status: Published application
- Kind: A1
- Application number: 14/735,902
- Filed: 2015-06-10
- Published: 2016-12-15
- Earliest claimed: 2015-06-10
- Assignees: Huawei Technologies Co., Ltd.
- Applicants: Huawei Technologies Co., Ltd.
- Inventors: Peter Ashwood-Smith; Tao Wan
- Web page: https://patentgrep.com/patent/US20160366144A1

## CPC

- G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database}
- G06F 21/10: Protecting distributed programs or content, e.g. vending or licensing of copyrighted material (protection in video systems or pay television H04N7/16) {; Digital rights management [DRM]}
- G06F 21/40: by quorum, i.e. whereby two or more security principals are required
- H04L 63/10: {for controlling access to devices or network resources}
- H04L 63/102: {Entity profiles}
- H04L 63/107: {wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals}
- H04W 12/084: using delegated authorisation, e.g. open authorisation [OAuth] protocol
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

An authorization method comprising receiving command signals from a plurality of controlling accounts, determining whether the number of received command signals meets a threshold, wherein the threshold is at least two, and executing a controlled function in response to the determination. An authorization method comprising accessing a control interface as a first controlling account for a controlled function, communicating command instructions for sending a command with a second controlling account for the controlled function, and sending the command in accordance with the command instructions, wherein sending the command satisfies an authorization condition for executing the controlled function.

## Claims

### Claim 1

An authorization method comprising:
receiving command signals from a plurality of controlling accounts;
determining whether the number of received command signals meets a threshold, wherein the threshold is at least two; and
executing a controlled function in response to the determination.

### Claim 2 (depends on 1)

The method of claim 1, wherein each of the command signals is the same command.

### Claim 3 (depends on 1)

The method of claim 1, wherein the threshold is at least three.

### Claim 4 (depends on 1)

The method of claim 1, further comprising determining whether one or more authorization conditions for the controlled function are satisfied in response to receiving the command signals.

### Claim 5 (depends on 4)

The method of claim 4, wherein the authorization conditions indicate a number of command signals from the plurality of controlling accounts to satisfy the authorization conditions.

### Claim 6 (depends on 4)

The method of claim 4, wherein the authorization condition indicates a number of authorized locations for the plurality of controlling accounts to satisfy the authorization conditions.

### Claim 7 (depends on 4)

The method of claim 4, wherein the authorization conditions indicates a timeout threshold for receiving the command signals from the plurality of controlling accounts.

### Claim 8

An authorization method comprising:
accessing a control interface as a first controlling account for a controlled function;
communicating command instructions for sending a command with a second controlling account for the controlled function; and
sending the command in accordance with the command instructions, wherein sending the command satisfies an authorization condition for executing the controlled function.

### Claim 9 (depends on 8)

The method of claim 8, wherein communicating command instructions with the second controlling account uses in-band communication.

### Claim 10 (depends on 8)

The method of claim 8, wherein communicating command instructions with the second controlling account uses out-of-band communication.

### Claim 11 (depends on 8)

The method of claim 8, wherein a number of controlling accounts to satisfy the authorization condition is two.

### Claim 12 (depends on 8)

The method of claim 8, wherein the authorization condition indicates a number of authorized locations to satisfy the authorization conditions.

### Claim 13 (depends on 8)

The method of claim 8, wherein the authorization condition indicates a timeout threshold for sending the command.

### Claim 14

An apparatus comprising:
a receiver;
a memory; and
a processor coupled to the memory and the receiver, and configured to:
access a control interface as a first controlling account from a set of controlling accounts;
communicate command instructions for sending a command with a second controlling account from the set of controlling accounts;
signal the command in accordance with the command instructions;
receive a second command from the second controlling account in accordance with the command instructions; and
execute a controlled function in response to receiving the second command.

### Claim 15 (depends on 14)

The apparatus of claim 14, wherein the processor is configured to determine whether authorization conditions that are associated with the controlled function are satisfied.

### Claim 16 (depends on 15)

The apparatus of claim 15, wherein the authorization conditions indicate a number of command signals from the controlling accounts accessing the control interface to satisfy the authorization conditions.

### Claim 17 (depends on 15)

The apparatus of claim 15, wherein the authorization conditions indicate a minimum number of command signals from the controlling accounts accessing the control interface to satisfy the authorization conditions.

### Claim 18 (depends on 15)

The apparatus of claim 15, wherein the authorization condition indicate a number of authorized locations to satisfy the authorization conditions.

### Claim 19 (depends on 14)

The apparatus of claim 14, wherein the first command and the second command are the same.

### Claim 20 (depends on 14)

The apparatus of claim 14, wherein communicating command instructions with the second controlling account from the set of controlling accounts comprises using in-band communication, out-of-band communication, or both.