US5881225A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Security monitor for controlling functional access to a computer system
Assignee: QUOVADX Inc GEORGIA Corp
•
Filing: 1997-04-14
•
Granted: 1999-03-09
•
Expires: 2017-04-14
Abstract
Abstract Security functions for a computer system are controlled by a security monitor. A user desiring access to the system inputs a user identification and password combination, and a role the user to assume is selected from among one or more roles defined in the system. Upon being validated as an authorized user performing a particular role, the user is then authorized to perform certain functions and tasks specifically and to see information associated with that role (and optimally the work group the user is assigned). For some users, no role or a "null" roll is chosen, and authorization for certain functions and tasks is accomplished due to that particular user having been predefined by an administrator as being allowed to perform those functions and tasks, usually due to the predefined privileges associated with the work group(s) to which the user belongs.
Inventors
- 👤 Erik K. Worth
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-31 00:52
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/60; G06F21/62; G06F21/629; G06F2221/00; G06F2221/21; G06F2221/2149
Claims Analysis
Total Claims: 15
Claim 1
Independent Claim
130 words
In a computer system including an input device, a method for authorizing the activities of a user comprising the steps of: accepting from the user user-specific information entered into said computer system using the input device; comparing said user-specific information against previously stored authorization information and permitting the user to access the computer system if and only if said user-specific information matches said previously stored authorization information; selecting a role which the user will assume; determining the privileges to which the user is authorized, based upon said user-specific information and said selected role; passing data corresponding to said privileges to a security monitor, said security monitor being queryable from application programs so that upon such query an application program may obtain information defining privileges to which the user is authorized.
Claim 2
Dependent Claim
130 words
In a computer system including an input device, a method for authorizing the activities of a user comprising the steps of: accepting from the user user-specific information entered into said computer system using the input device; comparing said user-specific information against previously stored authorization information and permitting the user to access the computer system if and only if said user-specific information matches said previously stored authorization information; selecting a role which the user will assume; determining the privileges to which the user is authorized, based upon said user-specific information and said selected role; passing data corresponding to said privileges to a security monitor, said security monitor being queryable from application programs so that upon such query an application program may obtain information defining privileges to which the user is authorized.
Claim 3
Dependent Claim
28 words
A method according to claim 1 wherein said selecting step includes the step of listing for the user a selection of authorized roles that said user may assume.
Claim 4
Dependent Claim
35 words
A method according to claim 1 wherein said determining step further includes the step of determining the privileges to which said user is authorized, based upon the groups in which said user is a member.
Claim 5
Dependent Claim
20 words
A method according to claim 1 wherein said role is defined as the title of a position of functional responsibility.
Claim 6
Dependent Claim
23 words
A method according to claim 4 wherein said role includes a role selected from the following: Administrator, Nurse, Physician, Cardiologist, Orderly, Psychiatrist, Psychologist.
Claim 7
Dependent Claim
126 words
In a computer system including an input device, a method for authorizing the activities of a user comprising the steps of: accepting from the user user-specific information entered into said computer system using the input device; comparing said user-specific information against previously stored authorization information and permitting the user to access the computer system if and only if said user-specific information matches said previously stored authorization information; determining privileges to which the user is authorized, based upon said user-specific information and previously stored group information defining with which the user is associated; passing data corresponding to said authorized privileges to a security monitor, said security monitor being queryable from application programs so that upon such query an application program may obtain information defining said authorized privileges.
Claim 8
Dependent Claim
126 words
In a computer system including an input device, a method for authorizing the activities of a user comprising the steps of: accepting from the user user-specific information entered into said computer system using the input device; comparing said user-specific information against previously stored authorization information and permitting the user to access the computer system if and only if said user-specific information matches said previously stored authorization information; determining privileges to which the user is authorized, based upon said user-specific information and previously stored group information defining with which the user is associated; passing data corresponding to said authorized privileges to a security monitor, said security monitor being queryable from application programs so that upon such query an application program may obtain information defining said authorized privileges.
Claim 9
Dependent Claim
173 words
In a computer system including an input device, a method for authorizing the activities of a user comprising the steps of: accepting from the user user-specific information entered into said computer system using the input device; comparing said user-specific information against previously stored authorization information and permitting the user to access the computer system if and only if said user specific information matches said previously stored authorization information; receiving a user specified role; determining privileges assigned to the user by said user- specific information and said user specified role; receiving a requested function query when the user seeks to perform a function, said requested function query generated by an application program providing said function; responding to said requested function query by determining whether the user is authorized to perform said function through said application program; authorizing said application program to provide said function if said function is found authorized in said step of responding; and denying authorization to said application program if said function is found not authorized in said step of responding.
Claim 10
Dependent Claim
173 words
In a computer system including an input device, a method for authorizing the activities of a user comprising the steps of: accepting from the user user-specific information entered into said computer system using the input device; comparing said user-specific information against previously stored authorization information and permitting the user to access the computer system if and only if said user specific information matches said previously stored authorization information; receiving a user specified role; determining privileges assigned to the user by said user- specific information and said user specified role; receiving a requested function query when the user seeks to perform a function, said requested function query generated by an application program providing said function; responding to said requested function query by determining whether the user is authorized to perform said function through said application program; authorizing said application program to provide said function if said function is found authorized in said step of responding; and denying authorization to said application program if said function is found not authorized in said step of responding.
Claim 11
Dependent Claim
82 words
The method of claim 7, further including the steps of: loading information pertaining to said privileges into a security monitor; and using said security monitor to perform said steps of determining whether the user is authorized to perform said function through said application program, authorizing said application program to provide said function if said function is found authorized in said step of responding, and denying authorization to said application program if said function is found not authorized in said step of responding.
Claim 12
Dependent Claim
25 words
A method according to claim 7 further including a step of listing for the user a selection of authorized roles that said user may assume.
Claim 13
Dependent Claim
35 words
A method according to claim 7 wherein said determining step further includes the step of determining the privileges to which said user is authorized, based upon the groups in which said user is a member.
Claim 14
Dependent Claim
20 words
A method according to claim 7 wherein said role is defined as a title of a position of functional responsibility.
Claim 15
Dependent Claim
23 words
A method according to claim 11 wherein said role includes a role selected from the following: Administrator, Nurse, Physician, Cardiologist, Orderly, Psychiatrist, Psychologist.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2002-03-08 | 2002-09-07 | 2003-03-09 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2006-03-08 | 2006-09-07 | 2007-03-09 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2010-03-08 | 2010-09-07 | 2011-03-09 | $7700.00 | Window Closed / Lapsed |