System for activating multiple applications for concurrent operation

• US 20060075224A1
• Filed: 09/26/2005
• Published: 04/06/2006
• Est. Priority Date: 09/24/2004
• Status: Abandoned Application

• Current Assignee: Siemens Medical Solutions Health Services Corporation (Siemens AG)
• Original Assignee: Siemens Medical Solutions Health Services Corporation (Siemens AG)
• Inventors: Tao, David
• Application Number:
  US11/235,406
• Publication Number:
  US 20060075224A1
• Time in Patent Office: Days
• US Class Current: 713/164
• CPC Class Codes: G06F 21/121 Restricting unauthorised execution of programs
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations

Abstract

A single sign-on system enables a user to access multiple, disparate executable applications for concurrent operation in the system. The system includes a data source, an interface processor, and an authentication processor. The data source provides configuration data for multiple executable applications. The configuration data identifies an individual executable application and a launching process for the individual executable application. The interface processor receives user credential information, including a user identifier, in response to user initiation of a first executable application of the multiple executable applications. The authentication processor authenticates a user authorized to access a second executable application of the multiple executable applications, in response to receiving the configuration data and the user credential information. The authentication processor initiates execution of the second executable application, in response to receiving a user command to activate the second executable application for a first time during a user session of computer operation.

Claims

1. A system for enabling a user to access a plurality of operating executable applications, comprising:

a source of configuration data for a plurality of executable applications, said configuration data identifying, an individual executable application and how said individual executable application is launched;

an interface processor for receiving user credential information including a user identifier in response to user initiation of a first executable application of said plurality of executable applications; and

an authentication processor, using said configuration data and received user credential information for,

authenticating a user is authorized to access a second executable application of said plurality of executable applications and

initiating execution of said second executable application, in response to a user command to activate said second executable application for a first time during a user session of computer operation.

2. A system according to claim 1, wherein

said user credential information is received in response to user logon to said first executable application and

said authentication processor uses said credential information provided to logon to said first application to provide automatic user logon to remaining applications of said plurality of executable applications and logon to an individual application of said remaining applications is initiated upon user activation of said individual application of said remaining applications.

3. A system according to claim 1, wherein

said configuration data identifies a location of said individual executable application and user credentials required to access said individual application.

4. A system according to claim 1, including

a credential translator for converting user credential information received by said interface processor to be compatible with credential information required to access said second executable application and

said authentication processor, uses said converted credentials to authenticate said user is authorized to access said second executable application.

5. A system according to claim 4, including

a request detector for detecting a request to access said second executable application and initiating activation of said credential translator and execution of said second executable application in response to a detected request and a determination said user is authorized to access said second executable application wherein

said request detector detects said request to access said second executable application by identifying a received URL.

6. A system according to claim 4, wherein

said credential translator determines credentials required to access said second executable application from said configuration data.

7. A system according to claim 1, wherein

said configuration data identifies methods of authentication of individual applications of said plurality of executable applications,

said authentication processor authenticates a user is authorized to access said second executable application using a method of authentication determined using said configuration data and

said authentication processor employs at least one of, (a) a CCOW compatible protocol, (b) UIIP compatible protocol, (c) HTTP Basic protocol, and executable Scripts, in initiating said second executable application.

8. A system according to claim 1, wherein

said configuration data identifies navigation parameters identifying acceptable application launch points in a user task sequence workflow and said user credential information includes at least one of, (a) a password associated with said user identifier, and (b) a trust token.

9. A system according to claim 1, including

mapping information identifying for individual executable applications corresponding executable applications used to launch said individual applications and

a logoff processor for, in response to a received command to close a particular executable application, using said mapping information to selectively close,

(a) said particular executable application and

(b) executable applications exclusively launched from said particular executable application.

10. A system for enabling a user to access a plurality of operating executable applications with a single logon, comprising:

a source of configuration data for a plurality of executable applications, said configuration data identifying, an individual executable application and how said individual executable application is launched;

an interface processor for receiving user credential information including a user identifier in response to user logon to a first executable application of said plurality of executable applications; and

an authentication processor, using said configuration data and received user credential information for providing automatic user logon to remaining applications of said plurality of executable applications and logon to an individual application of said remaining applications is initiated upon user first activation of said individual application of said remaining applications during a user session of computer operation at a time occurring within the duration of said session.

11. A system for enabling a user to access a plurality of operating executable applications with a single logon, comprising:

a source of configuration data for a plurality of executable applications, said configuration data identifying, an individual executable application and how said individual executable application is launched;

an interface processor for receiving user credential information including a user identifier in response to user initiation of a first executable application of said plurality of executable applications; and

an authentication processor, using said configuration data and received user credential information for,

authenticating a user is authorized to access a second executable application of said plurality of executable applications and

initiating execution of said second executable application, in response to a user command to activate said second executable application received via an image associated with said second executable application following user navigation to said image.

12. A system according to claim 11, wherein

said authentication processor initiates execution of said second executable application, in response to a user command to activate said second executable application via a link associated with said second executable application following user navigation to said image.

13. A system according to claim 11, wherein

said image is associated with a particular task of a task sequence being performed by said user and

said user command to activate said second executable application is for a first activation of said second executable application during a user session of computer operation, said command being received at a time occurring within the duration of said session.

14. A method comprising:

receiving, from a user, user credential information in response to user initiation of a first executable application of a plurality of executable applications;

authenticating that the user is authorized to access the first executable application responsive to receiving the user credential information;

launching the first executable application responsive to authenticating that the user is authorized to access the first executable application;

receiving a request to launch a second executable application responsive to an input from the user into the first executable application;

authenticating that the user is authorized to access the second executable application of said plurality of executable applications responsive to receiving the request to launch the second executable application, and responsive to a source of configuration data identifying the second executable application and launching conditions for the second executable application; and

launching the second executable application responsive to authenticating that the user is authorized to access the second executable application.

15. The method according to claim 14, further comprising:

tracking the launch of the first and second applications; and

closing at least one of the first and second applications responsive to predetermined conditions.