Method, System and Computer Program Product for Access Control

• US 20070124595A1
• Filed: 11/20/2006
• Published: 05/31/2007
• Est. Priority Date: 11/25/2005
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Carter, Marc, Lewis, Ian
• Application Number:
  US11/561,454
• Publication Number:
  US 20070124595A1
• Time in Patent Office: Days
• US Class Current: 713/182
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 2221/2133 Verifying human interaction, e.g., Captcha

Abstract

An access control method in a computer system comprising the steps of: generating an image having first and second image elements, each of the image elements having associated an element type name and an image attribute, the image attribute including an attribute name and an attribute value; generating an access control question including an identifier of the first image element and the attribute name of the image attribute associated with the first image element; receiving an access control response; in response to a determination that the access control response corresponds to the attribute value of the image attribute associated with the first image element, providing access to a resource in the computer system.

Claims

1. An access control method in a computer system comprising the steps of:

generating an image having first and second image elements, each of the image elements having associated an element type name and an image attribute, the image attribute including an attribute name and an attribute value;

generating an access control question including an identifier of the first image element and the attribute name of the image attribute associated with the first image element;

receiving an access control response;

in response to a determination that the access control response corresponds to the attribute value of the image attribute associated with the first image element, providing access to a resource in the computer system.

2. The method of claim 1 wherein the identifier of the first image element comprises the element type name of the first image element.

3. The method of claim 1 wherein the identifier of the first image element comprises:

a) an identifier of the second image element; and

b) a relative location in the image of the fist image element with respect to the second image element.

4. The method of claim 3 wherein the identifier of the second image element comprises the element type name of the second image element and the attribute value of the image attribute associated with the second image element.

5. The method of claim 2 wherein the first image element has further associated a second image attribute, and the identifier of the first image element includes an attribute value of the second image attribute associated with the first image element.

6. The method of claim 1 wherein the determination that the access control response corresponds to the attribute value of the image attribute associated with the first image element is made based on an equivalence of the access control response and the attribute value of the image attribute associated with the first image element.

7. The method of claim 6 wherein the equivalence is determined by an equivalence dictionary.

8. The method of claim 7 wherein the equivalence dictionary includes a list of synonymous terms.

9. An access control system for a computer system comprising:

means for generating an image having first and second image elements, each of the image elements having associated an element type name and an image attribute, the image attribute including an attribute name and an attribute value;

means for generating an access control question including an identifier of the first image element and the attribute name of the image attribute associated with the first image element;

means for receiving an access control response;

means for, in response to a determination that the access control response corresponds to the attribute value of the image attribute associated with the first image element, providing access to a resource in the computer system.

10. The system of claim 9 wherein the identifier of the first image element comprises the element type name of the first image element.

11. The system of claim 9 wherein the identifier of the first image element comprises:

a) an identifier of the second image element; and

b) a relative location in the image of the fist image element with respect to the second image element.

12. The system of claim 11 wherein the identifier of the second image element comprises the element type name of the second image element and the attribute value of the image attribute associated with the second image element.

13. The system of claim 10 wherein the first image element has further associated a second image attribute, and the identifier of the first image element includes an attribute value of the second image attribute associated with the first image element.

14. The system of claim 9 wherein the determination that the access control response corresponds to the attribute value of the image attribute associated with the first image element is made based on an equivalence of the access control response and the attribute value of the image attribute associated with the first image element.

15. The system of claim 14 wherein the equivalence is determined by an equivalence dictionary.

16. The system of claim 15 wherein the equivalence dictionary includes a list of synonymous terms.

17. A computer-useable medium embodying computer program code, the computer program code comprising computer executable instructions configured for:

generating an image having first and second image elements, each of the image elements having associated an element type name and an image attribute, the image attribute including an attribute name and an attribute value;

generating an access control question including an identifier of the first image element and the attribute name of the image attribute associated with the first image element;

receiving an access control response;

in response to a determination that the access control response corresponds to the attribute value of the image attribute associated with the first image element, providing access to a resource in the computer system.

18. The computer-useable medium of claim 17, wherein the identifier of the first image element comprises the element type name of the first image element.

19. The computer-useable medium of claim 17, wherein the identifier of the first image element comprises:

a) an identifier of the second image element; and

b) a relative location in the image of the fist image element with respect to the second image element.

20. The computer-useable medium of claim 19, wherein the identifier of the second image element comprises the element type name of the second image element and the attribute value of the image attribute associated with the second image element.