Multiple user desktop graphical identification and authentication

• US 20070101155A1
• Filed: 01/10/2006
• Published: 05/03/2007
• Est. Priority Date: 01/11/2005
• Status: Active Grant

• Current Assignee: Indigo Identityware Incorporated
• Original Assignee: Sig-Tec
• Inventors: Hoghaug, Thomas, Hoghaug, Robert
• Granted Patent: US 8,438,400 B2
• Time in Patent Office: Days
• US Class Current: 713/189
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 2221/2149 Restricted operating environment

Abstract

A multiple user desktop graphical identification and authentication configured as a loadable dynamic link library (DLL) intended to replace the default Microsoft graphical identification and authentication. It has the ability to create secure, private logon sessions for each user that logs on to the system. There can be up to at least thirteen users logged in at the same time and each user will have their own desktop environment. Auto log off functions may be set based on time of inactivity and/or number of individual users. The multiple user desktop graphical identification and authentication functions in a domain and non-networked environments and needs no added hardware.

Claims

1. a method for secure access to computer resources:

including the steps of;

a. providing a computing module compatible with an operating system having graphical identification and authentication (GINA), where the computing module is a multiple user desktop (MUD) GINA module;

b. substituting the MUD GINA for the default operating system GINA; and

,

c. using the MUD GINA to provide secure access to the computer resources.

2. The method of claim 1, further comprising the steps of:

a. providing a logging service application, and;

b. using the logging service application to monitor actions taken by a user of the computing resources.

3. The method of claim 1, wherein the operating system is a 32-bit Windows NT based operating system.

4. The method of claim 1, wherein the operating system is a 64-bit operating system.

5. The method of claim 1, wherein the operating system is one portion of a multiple operating system computing environment.

6. The method of claim 1, wherein the computing module is a DLL.

7. The method of claim 1, further comprising the steps of:

a. creating a dummy user for Winlogon;

b. using the dummy user to maintain a logged-on state with Winlogon;

c. providing MUD GINA functionality for secure access to the computer resources, including intermittent logon and logoff by at least one user; and

,

d. using the MUD GINA functionality to logon and logoff while the logged-on state is maintained with Winlogon.

8. The method of claim 7, wherein the at least one user is more than one user.

9. The method of claim 8, wherein more than one user is logged in, each to their own desktop, with GINA access to lock, unlock, and change desktops.

10. Software for secure access to computer resources, comprising:

a. multiple user desktop (MUD) means for creating and maintaining MUDs;

b. means for graphical identification and authentication (GINA) which provides for secure MUDs;

c. said means for GINA substitutes for the standard operating system GINA; and

,

d. said MUD means provides multiple user desktops capable of running concurrently while said means for GINA provides access security for each of the MUDs.

11. Software for secure access to computer resources using 32-bit Windows NT based operating systems, comprising:

a. an MUD GINA DLL;

b. said MUD GINA DLL substitutes for the standard operating system GINA; and

,

c. said MUD GINA DLL provides secure access to multiple user desktops while maintaining the system logged on with Winlogon by maintaining a dummy user.

12. The software of claim 11, further comprising:

a. a logging service application, and;

b. said the logging service application monitors actions taken by a user of the computing resources.

13. The software of claim 11, wherein the operating system is a 32-bit Windows NT based operating system.

14. The software of claim 11, wherein the operating system is selected from a list consisting of Windows NT 4.0 workstation/server, Windows 2000 workstation/server, Windows XP, and a successor operating system.

15. The software of claim 11, wherein the operating system is one portion of a multiple operating system computing environment.

17. The software of claim 12, wherein said software provides for more than one user to be logged in concurrently, each to their own private desktop, with GINA access to lock, unlock, and change desktops.

18. The software of claim 17, wherein the more than one user is at least 13 users.

19. The software of claim 11, wherein the computer resources comprise at least one element selected from the list consisting of a computer, a workstation, a server, a kiosk, a nursing station, a bank teller terminal, a network, an application, an operating environment, a database, a computer-based control terminal, and a computer file.

16. Software for secure access to computer resources using 32-bit Windows NT based operating systems, comprising:

a. a substitute GINA DLL;

b. said substitute GINA DLL substitutes for the standard operating system GINA;

c. said substitute GINA DLL provides secure access to a user desktop while maintaining the system logged on with Winlogon by maintaining a dummy user; and

,

d. said substitute GINA DLL provides secure access to a user desktop, with intermittent logon and logoff by at least one user, while the user desktop and applications are running.