System and method for ensuring security with multiple authentication schemes

• US 20030200466A1
• Filed: 04/23/2002
• Published: 10/23/2003
• Est. Priority Date: 04/23/2002
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Nelson, Kenneth Carlin, Noronha, Marilene Araujo
• Granted Patent: US 7,308,580 B2
• Time in Patent Office: Days
• US Class Current: 713/202
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24
• CPC Class Codes: Y10S 707/99939 Privileged access

Abstract

System for authenticating a user for logon to a content manager running on top of a database manager. A connect procedure connects the user to a database manager; and then a logon procedure logs on the user to the content manager selectively responsive to the user connecting to the database manager; the user being authenticated by a third party by way of a user exit or a trusted logon environment and privilege; or the user being authenticated by the content manager.

Claims

1. Method for authenticating a user, comprising:

connecting said user to a database manager; and

logging on said user to a content manager running on top of said database manager selectively responsive to

said user connecting to said database manager;

said user being authenticated by a third party;

or

said user being authenticated by said content manager.

2. The method of claim 1, said user being logged on to said content manager responsive to said user connecting to said database manager when database (DB) user indicia and content manager (CM) user indicia are the same.

3. The method of claim 1, said user being logged on to said content manager by content manager authentication responsive to said content manager receiving database (DB) user indicia for a DB user having connect privilege and a correct logon password.

4. The method of claim 1, said user being logged on to said content manager by third party authentication responsive to a user exit authenticating content manager (CM) user indicia.

5. The method of claim 1, said user being logged on to said content manager by third party authentication responsive to said content manager receiving database (DB) user indicia for a DB user having connect and trusted logon privileges in a trusted logon system environment.

6. Method for authenticating a user, comprising:

executing a database connect procedure with respect to database (DB) user indicia and DB user password;

executing a content manager logon procedure with respect to content manager (CM) user indicia;

said logon procedure including passing to a user exit said CM user indicia; and

authenticating said user for logon selectively responsive to

said user exit authenticating said CM user;

OR

said user exit not authenticating said CM user AND

said DB user indicia and said CM user indicia being the same;

OR

said DB user having connect privilege AND said DB user password bing correct;

OR

said DB user having connect privilege AND said DB user password being null AND said DB user having trusted logon privilege within a trusted logon system environment.

7. System for authenticating a user, comprising:

a database manager;

a content manager;

a connect procedure for connecting said user to a database manager; and

a logon procedure for logging on said user to said content manager selectively responsive to

said user connecting to said database manager;

said user being authenticated by a third party;

or

said user being authenticated by said content manager.

8. The system of claim 7, said user being logged on to said content manager responsive to said user connecting to said database manager when database (DB) user indicia and content manager (CM) user indicia are the same.

9. The system of claim 7, said user being logged on to said content manager by content manager authentication responsive to said content manager receiving database (DB) user indicia for a DB user having connect privilege and a correct logon password.

10. The system of claim 7, said user being logged on to said content manager by third party authentication responsive to a user exit authenticating content manager (CM) user indicia.

11. The system of claim 7, said user being logged on to said content manager by third party authentication responsive to said content manager receiving database (DB) user indicia for a DB user having connect and trusted logon privileges in a trusted logon system environment.

12. System for authenticating a user, comprising:

a database manager;

a content manager;

a user exit;

a database connect procedure for connecting said user to said database manager responsive to database (DB) user indicia and DB user password;

a content manager logon procedure for logging on said user with respect to content manager (CM) user indicia;

said logon procedure passing to said user exit said CM user indicia and authenticating said user for logon selectively responsive to

said user exit authenticating said CM user;

OR

said user exit not authenticating said CM user AND

said DB user indicia and said CM user indicia being the same;

OR

said DB user having connect privilege AND said DB user password being correct;

OR

said DB user having connect privilege AND said DB user password being null AND said DB user having trusted logon privilege within a trusted logon system environment.

13. A program storage device readable by a machine, tangibly embodying a program of instructions executable by a machine to perform a method for authorizing access by a user, comprising:

connecting said user to a database manager; and

logging on said user to a content manager running on top of said database manager selectively responsive to

said user connecting to said database manager;

said user being authenticated by a third party;

or

said user being authenticated by said content manager.

14. The program storage device of claim 13, said user being logged on to said content manager responsive to said user connecting to said database manager when database (DB) user indicia and content manager (CM) user indicia are the same.

15. The program storage device of claim 13, said user being logged on to said content manager by content manager authentication responsive to said content manager receiving database (DB) user indicia for a DB user having connect privilege and a correct logon password.

16. The program storage device of claim 13, said user being logged on to said content manager by third party authentication responsive to a user exit authenticating content manager (CM) user indicia.

17. The program storage device of claim 13, said user being logged on to said content manager by third party authentication responsive to said content manager receiving database (DB) user indicia for a DB user having connect and trusted logon privileges in a trusted logon system environment.

18. A program storage device readable by a machine, tangibly embodying a program of instructions executable by a machine to perform a method for authorizing access by a user, comprising:

executing a database connect procedure with respect to database (DB) user indicia and DB user password;

executing a content manager logon procedure with respect to content manager (CM) user indicia;

said logon procedure including passing to a user exit said CM user indicia; and

authenticating said user for logon selectively responsive to

said user exit authenticating said CM user;

OR

said user exit not authenticating said CM user AND

said DB user indicia and said CM user indicia being the same;

OR

said DB user having connect privilege AND said DB user password bing correct;

OR

said DB user having connect privilege AND said DB user password being null AND said DB user having trusted logon privilege within a trusted logon system environment.

19. A computer program product configured to be operable to connect a user to a content manager running on top of a database manager according to a procedure comprising:

executing a database connect procedure with respect to database (DB) user indicia and DB user password;

executing a content manager logon procedure with respect to content manager (CM) user indicia;

said logon procedure including passing to a user exit said CM user indicia; and

authenticating said user for logon selectively responsive to

said user exit authenticating said CM user;

OR

said user exit not authenticating said CM user AND

said DB user indicia and said CM user indicia being the same;

OR

said DB user having connect privilege AND said DB user password bing correct;

OR

said DB user having connect privilege AND said DB user password being null AND said DB

user having trusted logon privilege within a trusted logon system environment.