Patent US3232587A successfully refreshed from Google Patents.
Patent US5881225A successfully refreshed from Google Patents.
← Back to Patent Explorer
US5881225A Expired / Lapsed US ⏱️ 0.0 years remaining

Security monitor for controlling functional access to a computer system

Assignee: QUOVADX Inc GEORGIA Corp
•
Filing: 1997-04-14
•
Granted: 1999-03-09
•
Expires: 2017-04-14
📄 Original PDF 🌐 Google Patents 🔄 Sync Now

Abstract

Abstract Security functions for a computer system are controlled by a security monitor. A user desiring access to the system inputs a user identification and password combination, and a role the user to assume is selected from among one or more roles defined in the system. Upon being validated as an authorized user performing a particular role, the user is then authorized to perform certain functions and tasks specifically and to see information associated with that role (and optimally the work group the user is assigned). For some users, no role or a "null" roll is chosen, and authorization for certain functions and tasks is accomplished due to that particular user having been predefined by an administrator as being allowed to perform those functions and tasks, usually due to the predefined privileges associated with the work group(s) to which the user belongs.

Inventors

  • 👤 Erik K. Worth

Bibliographic Details

Application Number —
Jurisdiction US
Data Source google_patents
Last Synchronized 2026-10-31 04:26
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/60; G06F21/62; G06F21/629; G06F2221/00; G06F2221/21; G06F2221/2149

Claims Analysis

Total Claims: 15
Claim 1
Independent Claim 130 words
In a computer system including an input device, a method for authorizing the activities of a user comprising the steps of: accepting from the user user-specific information entered into said computer system using the input device; comparing said user-specific information against previously stored authorization information and permitting the user to access the computer system if and only if said user-specific information matches said previously stored authorization information; selecting a role which the user will assume; determining the privileges to which the user is authorized, based upon said user-specific information and said selected role; passing data corresponding to said privileges to a security monitor, said security monitor being queryable from application programs so that upon such query an application program may obtain information defining privileges to which the user is authorized.
Claim 2
Dependent Claim 130 words
In a computer system including an input device, a method for authorizing the activities of a user comprising the steps of: accepting from the user user-specific information entered into said computer system using the input device; comparing said user-specific information against previously stored authorization information and permitting the user to access the computer system if and only if said user-specific information matches said previously stored authorization information; selecting a role which the user will assume; determining the privileges to which the user is authorized, based upon said user-specific information and said selected role; passing data corresponding to said privileges to a security monitor, said security monitor being queryable from application programs so that upon such query an application program may obtain information defining privileges to which the user is authorized.
Claim 3
Dependent Claim 28 words
A method according to claim 1 wherein said selecting step includes the step of listing for the user a selection of authorized roles that said user may assume.
Claim 4
Dependent Claim 35 words
A method according to claim 1 wherein said determining step further includes the step of determining the privileges to which said user is authorized, based upon the groups in which said user is a member.
Claim 5
Dependent Claim 20 words
A method according to claim 1 wherein said role is defined as the title of a position of functional responsibility.
Claim 6
Dependent Claim 23 words
A method according to claim 4 wherein said role includes a role selected from the following: Administrator, Nurse, Physician, Cardiologist, Orderly, Psychiatrist, Psychologist.
Claim 7
Dependent Claim 126 words
In a computer system including an input device, a method for authorizing the activities of a user comprising the steps of: accepting from the user user-specific information entered into said computer system using the input device; comparing said user-specific information against previously stored authorization information and permitting the user to access the computer system if and only if said user-specific information matches said previously stored authorization information; determining privileges to which the user is authorized, based upon said user-specific information and previously stored group information defining with which the user is associated; passing data corresponding to said authorized privileges to a security monitor, said security monitor being queryable from application programs so that upon such query an application program may obtain information defining said authorized privileges.
Claim 8
Dependent Claim 126 words
In a computer system including an input device, a method for authorizing the activities of a user comprising the steps of: accepting from the user user-specific information entered into said computer system using the input device; comparing said user-specific information against previously stored authorization information and permitting the user to access the computer system if and only if said user-specific information matches said previously stored authorization information; determining privileges to which the user is authorized, based upon said user-specific information and previously stored group information defining with which the user is associated; passing data corresponding to said authorized privileges to a security monitor, said security monitor being queryable from application programs so that upon such query an application program may obtain information defining said authorized privileges.
Claim 9
Dependent Claim 173 words
In a computer system including an input device, a method for authorizing the activities of a user comprising the steps of: accepting from the user user-specific information entered into said computer system using the input device; comparing said user-specific information against previously stored authorization information and permitting the user to access the computer system if and only if said user specific information matches said previously stored authorization information; receiving a user specified role; determining privileges assigned to the user by said user- specific information and said user specified role; receiving a requested function query when the user seeks to perform a function, said requested function query generated by an application program providing said function; responding to said requested function query by determining whether the user is authorized to perform said function through said application program; authorizing said application program to provide said function if said function is found authorized in said step of responding; and denying authorization to said application program if said function is found not authorized in said step of responding.
Claim 10
Dependent Claim 173 words
In a computer system including an input device, a method for authorizing the activities of a user comprising the steps of: accepting from the user user-specific information entered into said computer system using the input device; comparing said user-specific information against previously stored authorization information and permitting the user to access the computer system if and only if said user specific information matches said previously stored authorization information; receiving a user specified role; determining privileges assigned to the user by said user- specific information and said user specified role; receiving a requested function query when the user seeks to perform a function, said requested function query generated by an application program providing said function; responding to said requested function query by determining whether the user is authorized to perform said function through said application program; authorizing said application program to provide said function if said function is found authorized in said step of responding; and denying authorization to said application program if said function is found not authorized in said step of responding.
Claim 11
Dependent Claim 82 words
The method of claim 7, further including the steps of: loading information pertaining to said privileges into a security monitor; and using said security monitor to perform said steps of determining whether the user is authorized to perform said function through said application program, authorizing said application program to provide said function if said function is found authorized in said step of responding, and denying authorization to said application program if said function is found not authorized in said step of responding.
Claim 12
Dependent Claim 25 words
A method according to claim 7 further including a step of listing for the user a selection of authorized roles that said user may assume.
Claim 13
Dependent Claim 35 words
A method according to claim 7 wherein said determining step further includes the step of determining the privileges to which said user is authorized, based upon the groups in which said user is a member.
Claim 14
Dependent Claim 20 words
A method according to claim 7 wherein said role is defined as a title of a position of functional responsibility.
Claim 15
Dependent Claim 23 words
A method according to claim 11 wherein said role includes a role selected from the following: Administrator, Nurse, Physician, Cardiologist, Orderly, Psychiatrist, Psychologist.

References Cited (Backward Citations)

US5263167A Cited
US5295266A Cited
US5752242A Cited
US5748890A Cited

USPTO Annuity & Maintenance Windows

Annuity Stage Window Opens Payment Deadline Surcharge Period Until Estimated Fee Status
3.5 Years (Year 4) 2002-03-08 2002-09-07 2003-03-09 $2000.00 Window Closed / Lapsed
7.5 Years (Year 8) 2006-03-08 2006-09-07 2007-03-09 $3760.00 Window Closed / Lapsed
11.5 Years (Year 12) 2010-03-08 2010-09-07 2011-03-09 $7700.00 Window Closed / Lapsed

Assigned Categories & Tags

No categories assigned to this patent yet.

Assign Category Tag