# US 8,752,136 B2 · Access management method

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 8,752,136 B2
- Document ID: US8752136B2
- Status: Granted
- Kind: B2
- Application number: 12/663,071
- Filed: 2008-06-23
- Published: 2010-07-15
- Granted: 2014-06-10
- Earliest claimed: 2007-06-27
- Assignees: Orange
- Applicants: Vincent Frey
- Inventors: Vincent Frey
- Web page: https://patentgrep.com/patent/US8752136B2

## CPC

- H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)}
- G06F 21/30: Authentication, i.e. establishing the identity or authorisation of security principals
- G06F 21/31: User authentication
- G06F 21/62: Protecting access to data via a platform, e.g. using keys or access control rules
- H04L 9/321: {involving a third party or a trusted authority}
- H04L 63/104: {Grouping of entities}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

The invention relates to a data transmission system that includes the step of a first user or at least one second user accessing a resource. The novel feature of the invention is the fact that access to said resource is inhibited as long as said first and second users have not requested access thereto.

## Claims

### Claim 1

A computer-implemented method of managing access to a resource through a communication network by a group of users comprising a first user and at least one second user, the method comprising:
assigning beforehand, to each user of the group, a secret information specific to the user, and assigning beforehand, to the resource, a secret information specific to the resource, said resource specific secret information being determined as a function of the user specific secret information of all the users;
receiving from the first user a first request for accessing the resource, said first request including a secret information given by the first user, and verifying that the secret information given by the first user corresponds to the secret information specific to the first user;
verifying, using a processor of the computer, that all the users of the group have requested access to said resource through the communication network and have given the secret information specific to each user;
determining a value of the resource specific secret information from all the user specific secret information given, and comparing said value with the assigned resource specific secret information; and
authorizing all the users to access the resource if said determined value of the resource specific secret information equals the assigned resource specific secret information.

### Claim 2 (depends on 1)

The method according to claim 1, wherein a request by a given user of the group for accessing the resource, is associated with a step of authentication of that given user, whereby the access to the resource is authorized to all of said first and said at least one second users once all of the users have requested access to said resource and have been authenticated.

### Claim 3 (depends on 2)

The method according to claim 2 further comprising, after receiving from the first user said first access request, a step of reporting completion of said first access request to said at least one second user.

### Claim 4 (depends on 1)

The method according to claim 1, wherein said user specific secret information is chosen by a resource manager.

### Claim 5 (depends on 1)

The method according to claim 1, wherein said user specific secret information is chosen by said users.

### Claim 6 (depends on 1)

The method according to claim 1, wherein the step of determining said value of the resource specific secret information includes changing a variable as a function of said user specific secret information given.

### Claim 7 (depends on 1)

A computer program stored on a non-transitory computer-readable medium, comprising program code instructions for carrying out the method according to claim 1 when said program is executed on a computer.

### Claim 8 (depends on 1)

The method according to claim 1, further comprising:
prompting all the users of the group to enter secret information specific to each user of the group, after the first request from the first user has been received; and
inhibiting access to said resource as long as not all of the users of the group have correctly entered the secret information.

### Claim 9 (depends on 1)

The method according to claim 1, further comprising assigning a secret information specific to each user of the group by segmenting a string of characters into string segments, and assigning a string segment and an associated position to each user of the group, said string of characters being the secret information specific to the resource.

### Claim 10

A management system for managing access to a resource through a communication network by a group of users comprising a first user and at least one second user, the system comprising:
means for assigning beforehand, for each user of the group, a secret information specific to the user, and for the resource a secret information specific to the resource, said resource specific secret information being determined as a function of the user specific secret information of all the users;
means for receiving from any user of the group a request to access a resource;
means for verifying that all the users of the group have requested access to said resource through the communication network and have given the secret information specific to each user;
means for determining a value of the resource specific secret information from all the user specific secret information given, and for comparing said value with the assigned resource specific secret information; and
means for authorizing all the users to access the resource if said determined value of the resource specific secret information equals the assigned resource specific secret information.
