Front end for file access controller

Claim 2

An improved access controller front end for use with an access controller in a data processing system; the access controller front end comprising: means for detecting invalid and duplicate access authorizations; means for denying access to said data processing system responsive to detection of any of said invalid or duplicate access authorizations; means for retrieving data describing authorized users of said data processing system, which data is stored in a first file system within the access controller; means for acquiring data describing authorized or unauthorized users of said data processing system, which data is obtained from at least one second file system, said at least one second file system being communicatively coupled with said data processing system; means for comparing data retrieved from the controller describing authorized users with data obtained from said at least one second file system describing authorized or unauthorized users, so as to detect any matched data and mismatched data; first means for sorting data cooperating with said means for comparing data, said means for sorting data sorting said data retrieved from the controller describing authorized users into at least a first set of sorted data and a second set of sorted data, said first set of sorted data relating to said matched data, said second set of sorted data relating to said mismatched data; means for resolving at least a portion of any detected mismatches by updating data in said second set of sorted data with data obtained from said at least one second file system; and means for combining the matched data describing authorized users with the updated data describing authorized users, and recording the combined data within the access controller.

Claim 3

The improved access controller front end according to claim 1 wherein access to at least one data file system is controlled.

Claim 4

The improved access controller front end according to claim 1 wherein the first means for sorting data retrieved from the controller describing authorized users into at least a first set of sorted data and a second set of sorted data further comprises a second means for sorting said data mismatches into a plurality of subsets according to a mismatch type.

Claim 5

The improved access controller front end according to claim 1 further comprising a means for reporting cooperating with said means for resolving, said means for reporting indicating any said detected mismatches not updated by said means for resolving.

Claim 6

The improved access controller front end according to claim 4 wherein said means for reporting any detected mismatched and non-updated datadescribing authorized users further comprises a first means for transmitting a plurality of reports to a remote user.

Claim 7

The improved access controller front end according to claim 5 further comprising a second means for sorting any said detected mismatches not updated by said means for resolving into a plurality of subsets according to a mismatch type and a second means for transmitting a plurality of reports to at least one remote user, wherein reports are distinguished according to said mismatch type.

Claim 8

The improved access controller front end according to claim 1 wherein the means for recording the combined data within the access controller further comprises a means for recording a master list of authorized users of said data processing system.

Claim 9

The improved access controller front end according to claim 1 wherein the said mismatched data is further identified as incomplete data or data having null data fields included in the user data retrieved from the controller.

Claim 10

The improved access controller front end according to claim 1 wherein said data processing system further comprises a memory arranged as a plurality of mini-disks, and wherein said access controller front end further comprises: a means for confirming a master list of authorized users of said data processing system; a means for creating a plurality of lists of authorized users for said plurality of mini-disks from said master list, at least one list of said plurality of lists corresponding to each mini-disk; and a means for creating a processed master list from said plurality of lists of authorized users of said mini-disks.

Claim 11

An improved apparatus for use in a data processing system having a plurality of system loci for updating a designated remote file system at a remote system locus of said plurality of system loci in said data processing system with data from a local file system at a local system locus of said plurality of system loci in said data processing system describing authorized users of said data processing system comprising: means for retrieving data describing authorized users of said data processing system, which data is stored in said local file system; means for acquiring data describing authorized or unauthorized users of said data processing system, which data is obtained from at least one remote system locus of said plurality of system loci; means for comparing data retrieved from the local file system describing authorized users with data obtained from said at least one remote system locus describing authorized or unauthorized users, so as to detect any matched data and mismatched data; means for sorting data cooperating with said means for comparing data, said means for sorting data sorting said data retrieved from the local file system describing authorized users into at least a first set of sorted data and a second set of sorted data, said first set of sorted data relating to said matched data, said second set of sorted data relating to said mismatched data; means for resolving at least a portion of any detected mismatches by updating data in said second set of sorted data with data retrieved from the local file system; and means for combining the matched data describing authorized users with the updated data describing authorized users, and recording the combined data within said designated remote file system.

Claim 12

An improved apparatus for use in a data processing system having a plurality of system loci for updating a designated remote file system at a remote system locus of said plurality of system loci in said data processing system with data from a local file system at a local system locus of said plurality of system loci in said data processing system describing authorized users of said data processing system comprising: means for retrieving data describing authorized users of said data processing system, which data is stored in said local file system; means for acquiring data describing authorized or unauthorized users of said data processing system, which data is obtained from at least one remote system locus of said plurality of system loci; means for comparing data retrieved from the local file system describing authorized users with data obtained from said at least one remote system locus describing authorized or unauthorized users, so as to detect any matched data and mismatched data; means for sorting data cooperating with said means for comparing data, said means for sorting data sorting said data retrieved from the local file system describing authorized users into at least a first set of sorted data and a second set of sorted data, said first set of sorted data relating to said matched data, said second set of sorted data relating to said mismatched data; means for resolving at least a portion of any detected mismatches by updating data in said second set of sorted data with data retrieved from the local file system; and means for combining the matched data describing authorized users with the updated data describing authorized users, and recording the combined data within said designated remote file system.

Claim 13

An improved method for use with an access controller in a data processing system for controlling access to said data processing system; the method comprising the steps of: detecting invalid and duplicate access authorizations; denying access to said data processing system responsive to detection of any of said invalid or duplicate access authorizations; retrieving data describing authorized users of said data processing system, which data is stored in a first file system within the file access controller; acquiring data describing authorized or unauthorized users of said data processing system, which data is obtained from at least one second file system, said at least one second file system being communicatively coupled with said data processing system; comparing data retrieved from the controller describing authorized users with data obtained from said at least one second file system describing authorized or unauthorized users, so as to detect any matched data and mismatched data; sorting data in connection with said comparing data, said sorting data effecting sorting of said data retrieved from the controller describing authorized users into at least a first set of sorted data and a second set of sorted data, said first set of sorted data relating to said matched data, said second set of sorted data relating to said mismatched data; resolving at least a portion of any detected mismatches by updating data in said second set of sorted data with data obtained from said at least one second file system; combining the matched data describing authorized users with the updated data describing authorized users, and recording the combined data within the file access controller; and reporting any said detected mismatches not updated by said resolving.

Claim 14

An improved method for use with an access controller in a data processing system for controlling access to said data processing system; the method comprising the steps of: detecting invalid and duplicate access authorizations; denying access to said data processing system responsive to detection of any of said invalid or duplicate access authorizations; retrieving data describing authorized users of said data processing system, which data is stored in a first file system within the file access controller; acquiring data describing authorized or unauthorized users of said data processing system, which data is obtained from at least one second file system, said at least one second file system being communicatively coupled with said data processing system; comparing data retrieved from the controller describing authorized users with data obtained from said at least one second file system describing authorized or unauthorized users, so as to detect any matched data and mismatched data; sorting data in connection with said comparing data, said sorting data effecting sorting of said data retrieved from the controller describing authorized users into at least a first set of sorted data and a second set of sorted data, said first set of sorted data relating to said matched data, said second set of sorted data relating to said mismatched data; resolving at least a portion of any detected mismatches by updating data in said second set of sorted data with data obtained from said at least one second file system; combining the matched data describing authorized users with the updated data describing authorized users, and recording the combined data within the file access controller; and reporting any said detected mismatches not updated by said resolving.

Claim 15

The improved method according to claim 11 wherein the step for reporting any said detected mismatches not updated by said resolving further comprises the step of transmitting a plurality of reports to a remote user.

Claim 16

The improved method according to claim 11 wherein the step for sorting data retrieved from the controller describing authorized users into said first set of sorted data and said second set of sorted data further comprises the step of further sorting said mismatched data into subsets according to a mismatch type.

Claim 17

The improved method according to claim 11 wherein the step for recording the combined data within the file access controller further comprises the step of for recording a master list of authorized users of said data processing system.

Claim 18

The improved method according to claim 11 wherein the said mismatched data is further identified as incomplete data or data having null data fields included in the user data retrieved from the controller.

Claim 19

The improved method according to claim 11 wherein said data processing system further comprises a memory arranged as a plurality of mini-disks, and wherein said method for controlling access to a data processing system further comprises the steps of: confirming a master list of authorized users of said data processing system; creating a plurality of lists of authorized users for said plurality of mini-disks from said master list, at least one list of said plurality of lists corresponding to each mini-disk; and creating a processed master list from said plurality of lists of authorized users of said mini-disks.