US5774650A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Control of access to a networked system
Assignee: International Business Machines Corp
•
Filing: 1994-09-01
•
Granted: 1998-06-30
•
Expires: 2014-09-01
Abstract
Abstract A method and data processing system are disclosed for controlling the access of a plurality users to a computer system connectable over a network to a plurality of computers. The data processing system has facilities for restricting user access to the data processing system which includes a user authentication procedure in which at logon a user's identity is compared with a list of authorized users. In addition, the data processing system has a system-wide profile referenced by all users of the system at logon and temporary access control facilities for temporarily preventing access to the system by a normally authorized user or users. The temporary access control facilities allow a privileged user of the computer system to create a list of temporarily unauthorized users that is referenced by the system-wide profile at logon.
Inventors
- 👤 Sydney George Chapman
- 👤 Michael George Taylor
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-29 07:15
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/30; G06F21/31
Claims Analysis
Total Claims: 20
Claim 1
Independent Claim
179 words
A data processing system connectable over a network to a plurality of computers, wherein said data processing system has a plurality of authorized users, the data processing system comprising: means for restricting user access to the data processing system, said means for restricting access including means for performing a user authentication procedure in which, at logon, a user's identity is compared with a list of said plurality of authorized users; a system-wide profile referenced by all users of the data processing system at logon; and means for temporarily preventing access to the data processing system by a particular user among said plurality of authorized users, wherein said means for temporarily preventing access permits a privileged user among said plurality of authorized users to create a list of temporarily unauthorized users including said particular user, said list of temporarily unauthorized users being referenced by the system-wide profile at logon, wherein the means for temporarily preventing access includes means for logging off users already logged on to the data processing system who are listed within said list of temporarily unauthorized users.
Claim 2
Dependent Claim
179 words
A data processing system connectable over a network to a plurality of computers, wherein said data processing system has a plurality of authorized users, the data processing system comprising: means for restricting user access to the data processing system, said means for restricting access including means for performing a user authentication procedure in which, at logon, a user's identity is compared with a list of said plurality of authorized users; a system-wide profile referenced by all users of the data processing system at logon; and means for temporarily preventing access to the data processing system by a particular user among said plurality of authorized users, wherein said means for temporarily preventing access permits a privileged user among said plurality of authorized users to create a list of temporarily unauthorized users including said particular user, said list of temporarily unauthorized users being referenced by the system-wide profile at logon, wherein the means for temporarily preventing access includes means for logging off users already logged on to the data processing system who are listed within said list of temporarily unauthorized users.
Claim 3
Dependent Claim
34 words
The data processing system as claimed in claim 1, wherein the means for temporarily preventing access selectively modifies the system-wide profile to cause said system-wide profile to reference said list of temporarily unauthorized users.
Claim 4
Dependent Claim
41 words
The data processing system as claimed in claim 1, wherein said means for temporarily preventing access causes the system-wide profile to provide information regarding the a temporary access restriction to said particular user temporarily denied access to said data processing system.
Claim 5
Dependent Claim
61 words
The data processing system as claimed in claim 1, wherein the means for temporarily preventing access selectively determines a grace period and issues a warning to users listed within said list of temporarily unauthorized users who are already logged on to the data processing system that access to the data processing system will be restricted on expiration of the grace period.
Claim 6
Dependent Claim
27 words
The data processing system of claim 4, and further comprising means for providing information to currently logged on users before logging them off the data processing system.
Claim 7
Dependent Claim
30 words
The data processing system of claim 5, and further comprising means for logging off users currently logged on the data processing system in response to expiration of the grace period.
Claim 8
Dependent Claim
34 words
The data processing system as claimed in claim 1, wherein the means for temporarily preventing access is operable to automatically reinstate access to selected users among said temporarily unauthorized users at a specified time.
Claim 9
Dependent Claim
21 words
The data processing system of claim 7, and further comprising means for automatically restoring the authorization for said temporarily unauthorized users.
Claim 10
Dependent Claim
20 words
The data processing system as claimed in claim 1, in which the data processing system utilizes a UNIX operating system.
Claim 11
Dependent Claim
20 words
The data processing system of claim 1, and further comprising means for restoring the authorization for said temporarily unauthorized users.
Claim 12
Dependent Claim
22 words
The data processing system of claim 1, and further comprising means for logging off users currently logged on the data processing system.
Claim 13
Independent Claim
142 words
A method of temporarily preventing access to a data processing system connectable over a network to a plurality of computers, said data processing system having means for restricting user access to the data processing system, wherein said means for restricting access performs a user authentication procedure in which, at logon, the user's identity is compared to a list of a plurality of authorized users, said means for restricting access further having a system-wide profile referenced by all users of the data processing system at logon, the method comprising the steps of: referencing a list of temporarily unauthorized users from the system-wide profile; denying access to said data processing system to a user listed within said list of temporarily unauthorized users; and logging off users already logged on to the data processing system who are listed within said list of temporarily unauthorized users.
Claim 14
Independent Claim
142 words
A method of temporarily preventing access to a data processing system connectable over a network to a plurality of computers, said data processing system having means for restricting user access to the data processing system, wherein said means for restricting access performs a user authentication procedure in which, at logon, the user's identity is compared to a list of a plurality of authorized users, said means for restricting access further having a system-wide profile referenced by all users of the data processing system at logon, the method comprising the steps of: referencing a list of temporarily unauthorized users from the system-wide profile; denying access to said data processing system to a user listed within said list of temporarily unauthorized users; and logging off users already logged on to the data processing system who are listed within said list of temporarily unauthorized users.
Claim 15
Dependent Claim
30 words
The method of claim 12, said method further comprising the step of providing information regarding a temporary access restriction to a user temporarily denied access to said data processing system.
Claim 16
Dependent Claim
55 words
The method of claim 12, said method further comprising the steps of: determining a grace period; and issuing a warning to users listed within said list of temporarily unauthorized users who are already logged on the data processing system that access to said data processing system will be restricted upon expiration of the grace period.
Claim 17
Dependent Claim
27 words
The method of claim 12, said method further comprising the step of automatically reinstating access to selected users among said temporarily unauthorized users at a specified time.
Claim 18
Dependent Claim
93 words
In a data processing system connectable over a network to a plurality of computers, the improvement comprising: temporary access control facilitation means for temporarily disallowing a user access to the system, wherein said temporary access control facilitation means includes: a list of authorized users to be temporarily unauthorized to logon to said data processing system; means for restricting access to the data processing system for users on said list; and means for logging off users already logged on to the data processing system who are listed within said list of temporarily unauthorized users.
Claim 19
Dependent Claim
93 words
In a data processing system connectable over a network to a plurality of computers, the improvement comprising: temporary access control facilitation means for temporarily disallowing a user access to the system, wherein said temporary access control facilitation means includes: a list of authorized users to be temporarily unauthorized to logon to said data processing system; means for restricting access to the data processing system for users on said list; and means for logging off users already logged on to the data processing system who are listed within said list of temporarily unauthorized users.
Claim 20
Dependent Claim
42 words
The data processing system of claim 1, said system-wide profile further comprising means for initializing all users before allowing said users access to the data processing system, wherein said system-wide profile invokes said means for restricting user access before initializing a user.
References Cited (Backward Citations)
US4135240A
Cited
US4087856A
Cited
US4218738A
Cited
US4672572A
Cited
US4677434A
Cited
US4771461A
Cited
US5249230A
Cited
US5276901A
Cited
US5402490A
Cited
US5469576A
Cited
US5564016A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-06-29 | 2001-12-29 | 2002-06-30 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-06-29 | 2005-12-29 | 2006-06-30 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-06-29 | 2009-12-29 | 2010-06-30 | $7700.00 | Window Closed / Lapsed |