Method for using a data processing system as a function of an authorization, associated data processing system and associated program

• US 20020133715A1
• Filed: 12/04/2001
• Published: 09/19/2002
• Est. Priority Date: 12/04/2000
• Status: Abandoned Application

• Current Assignee: Siemens AG
• Original Assignee: Siemens AG
• Inventors: Benini, Giovanni
• Application Number:
  US10/006,314
• Publication Number:
  US 20020133715A1
• Time in Patent Office: Days
• US Class Current: 713/200
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: G06F 2221/2149 Restricted operating environment

Abstract

A method for using a data processing system as a function of an authorization, associated data processing system and associated program, wherein various authorization levels are defined for various user groups, a basic file contains the syntax for a basic authorization level, a priority file contains the syntax for a priority authorization level, the authorization level of a user is determined before the execution of the instructions of the user, and the basic file or the priority file is used, as a function of the authorization level, to define the instructions which the user is permitted to execute.

Claims

1. A method for using a data processing system as a function of an authorization, the method comprising the steps of:

defining a basic authorization level relating to execution of specific instructions using the data processing system for at least one basic user of the data processing system;

defining a priority authorization level, which permits execution of instructions with wider ranging access rights in comparison to the instructions of the basic authorization level, for at least one priority user of the data processing system;

noting at least one of the instructions and a syntax of the instructions for the basic authorization level in a basic file section;

noting at least one of the instructions and a syntax of the instructions for the priority authorization level in a priority file section;

determining the authorization level of a user before the execution of the instructions of the user; and

using one of the basic file section and the priority file section, as a function of the authorization levels determined, to define the instructions which the user can execute.

2. A method for using a data processing system as a function of an authorization as claimed in claim 1, the method further comprising the steps of:

storing the basic file section in a basic file; and

storing the preferred file section in a priority file, which differs from the basic file.

3. A method for using a data processing system as a function of an authorization as claimed in claim 1, wherein at least one of the basic file section and the priority file section does not itself define a program or program section which can be executed by a processor.

4. A method for using a data processing system as a function of an authorization as claimed in claim 1, the method further comprising the step of:

defining the instructions of the basic authorization level and at least one of an additional instruction and an expanded syntax in comparison with the syntax of the basic authorization level for the priority authorization level.

5. A method for using a data processing system as a function of an authorization as claimed in claim 1, the method further comprising the steps of:

transmitting, by a user, an instruction file with instructions to the data processing system for determining the authorization level;

checking the instructions contained in the instruction file as a function of the authorization level using one of the basic file section and the priority file section; and

storing the instruction file for a later execution if it contains only instructions which are valid for the authorization level which is determined.

6. A method for using a data processing system as a function of an authorization as claimed in claim 5, the method further comprising the steps of:

determining the authorization level of the user before the processing of the instruction file; and

using one of the basic file section and the priority file section to process the instruction file as a function of the authorization level for the processing of the instruction file.

7. A method for using a data processing system as a function of an authorization as claimed in claim 5, wherein the basic file section and the priority file section contain at least one of instructions and a syntax of the instructions of a markup language, which is used to described contents of character chains, the markup language being selected from the group consisting of SGML, XML, HTML 4.0, and a markup language based on one of these languages, such that the instruction file contains instructions in the markup language.

8. A method for using a data processing system as a function of an authorization as claimed in claim 5, wherein the basic file section in the priority file section define at least one of instructions and a syntax of the instructions for controlling a voice transmission via at least one of a circuit-switched telephone network and a packet-switched data transmission network, the syntax of instructions of a language selected from a group consisting of CPL and a language based on CPL, such that the instruction filed defines instructions for controlling the voice transmission.

9. A method for using a data processing system as a function of an authorization as claimed in claim 5, wherein, for processing the instruction file, a same parser program is used for decomposing the instruction file into individual instructions.

10. A method for using a data processing system as a function of an authorization as claimed in claim 5, wherein a same application program is used for executing the instructions, irrespective of the authorization level.

11. A data processing system which is used as a function of an authorization, comprising:

a part for defining a basic authorization level relating to execution of specific instructions using the data processing system for at least one basic user of the data processing system;

a part for defining a priority authorization level, which permits execution of instructions with wider ranging access rights in comparison to the instructions of the basic authorization level, for at least one priority user of the data processing system;

a part for noting at least one of the instructions and a syntax of the instructions for the basic authorization level in a basic file section;

a part for noting at least one of the instructions and a syntax of the instructions for the priority authorization level in a priority file section;

a part for determining the authorization level of a user before the execution of the instructions of the user; and

a part for using one of the basic file section and the priority file section, as a function of the authorization level determined, to define the instructions which the user can execute.

12. A program having a command sequence during whose execution a method for using data processing system as a function of an authorization is executed by a processor, comprising:

a section for defining a basic authorization level relating to execution of specific instructions using the data processing system for at least one basic user of the data processing system;

a section for defining a priority authorization level, which permits execution of instructions with wider ranging access rights in comparison to the instructions of the basic authorization level, for at least one priority user of the data processing system;

a section for noting at least one of the instructions and a syntax of the instructions for the basic authorization level in a basic file section;

a section for noting at least one of the instructions and a syntax of the instructions for the priority authorization level in a priority file section;

a section for determining the authorization level of a user before the execution of the instructions of the user; and

a section for using one of the basic file section and the priority file section, as a function of the authorization levels determined, to define the instructions which the user can execute.