METHOD FOR RESTRICTING THE USE OF AN APPLICATION PROGRAM, SYSTEM FOR AUTHENTICATING THE USER OF A MEASURING APPARATUS, AUTHENTICATION SERVER, CLIENT APPARATUS AND STORAGE MEDIUM

• US 20120096545A1
• Filed: 11/18/2011
• Published: 04/19/2012
• Est. Priority Date: 09/29/2004
• Status: Active Grant

• Current Assignee: Sysmex Corporation
• Original Assignee: Sysmex Corporation
• Inventors: KOEDA, Noriaki
• Granted Patent: US 8,713,632 B2
• Time in Patent Office: Days
• US Class Current: 726/19
• CPC Class Codes: G06F 21/126 Interacting with the operating system
• CPC Class Codes: G06F 21/629 to features or functions of an application

Abstract

A user authentication system is provided with a client apparatus and an authentication server. An application program used for processing the measurement results of the measuring apparatus is installed on the client apparatus. Databases for storing use authority information of the application program are provided on the authentication server. A user inputs authentication information when operating the client apparatus and the application program is started. The client apparatus sends the authentication information to the authentication server, and an authentication process is performed by the authentication server. When authentication is successful, the use authority information of this user is sent from the authentication server to the client apparatus, and the client apparatus sets the application use restrictions according to the use authority information.

Claims

1. A method for modifying use authority of a user for an application program used for processing measurement results of a measuring apparatus, comprising steps of:

receiving, by a client computer arranged in a facility where the measuring apparatus is arranged, input of authentication information used to authenticate a user;

sending the input authentication information from the client computer to the authentication server arranged in a place different from the facility;

authenticating, by the authentication server, a user based on the authentication information sent from the client computer;

when a user authentication is successful, acquiring, by the client computer, use authority information related to the authenticated user from the database of the authentication server, wherein the database stores use authority information which defines use authority to use objects configuring the application program;

setting, by the client computer, use restrictions of the application program for the authenticated user based on the acquired use authority information;

when the acquired use authority information indicates that the authenticated user is allowed to use an object for modifying the use authority information stored in the database, receiving, by the client computer, an instruction to modify the use authority information stored in the database;

sending the instruction from the client computer to the authentication server; and

modifying, by the authentication server, the use authority information stored in the database according to the instruction received from the client computer.

2. The method of claim 1, wherein

the step of setting use restrictions of the application program comprises steps of:

searching objects configuring the application program;

determining whether or not the authenticated user is allowed to use the searched objects based on the use authority information acquired from the authentication server; and

setting an object as non-usable when it has been determined the user does not have use authority of the object.

3. The method of claim 1, wherein

the database stores first information including a user group associated with a user, and a second information including use authority information associated with a user group, and

the authentication server modifies the use authority information included in the second information.

4. A system for modifying use authority of a user for an application program used for processing measurement results of a measuring apparatus, comprising:

a measuring apparatus that is arranged in a facility and measures a sample;

a client computer that is arranged in the facility, and comprises a first memory under control of a first processor and an input unit for receiving an input of authentication information used to authenticate a user, the first memory storing an application program used for processing measurement results of the measuring apparatus; and

an authentication server for authenticating the user, that is arranged at a place different from the facility, and that comprises a second memory under control of a second processor, wherein the second memory comprises a database storing use authority information which defines use authority to use objects configuring the application program, wherein

the first processor performs operations comprising;

sending the authenticated information input by the input unit to the authentication server;

when a user authentication is successful, acquiring use authority information related to the authenticated user from the authentication server;

setting use restrictions of the application program for the authenticated user based on the acquired use authority information;

when the acquired use authority information indicates that the authenticated user is allowed to use an object for modifying the use authority information stored in the database, receiving an instruction to modify the use authority information stored in the database; and

sending the instruction to the authentication server, wherein

the second processor modifies the use authority information stored in the database according to the instruction received from the client computer.

5. The system of claim 4, wherein

the first processor performs operations comprising:

searching objects configuring the application program;

determining whether or not the authenticated user is allowed to use the searched objects based on the use authority information acquired from the authentication server; and

setting an object as non-usable when it has been determined the user does not have use authority of the object.

6. The system of claim 5, wherein

the object is a control in a window system.

7. The system of claim 6, wherein

the first processor searches a control included in a window when the window is opened or changed in the application program.

8. The system of claim 4, wherein

the database stores first information including a user group associated with a user, and a second information including use authority information associated with a user group, and

the second processor modifies the use authority information included in the second information.

9. A client computer that is arranged in a facility and processes measurement results of a measuring apparatus which is arranged in the facility, the client computer comprising:

an input unit for receiving an input of authentication information used to authenticate a user;

a memory under control of a processor, wherein the memory stores an application program used for processing measurement results of the measuring apparatus, wherein

the application program enables the processor to perform operations comprising;

sending the authenticated information input by the input unit to a authentication server which is arranged at a place different from the facility;

when a user authentication is successful, acquiring use authority information related to the authenticated user from a database of the authentication server, wherein the database stores use authority information which defines use authority to use objects configuring the application program;

setting use restrictions of the application program for the authenticated user based on the acquired use authority information;

when the acquired use authority information indicates that the authenticated user is allowed to use an object for modifying the use authority information stored in the database, receiving an instruction to modify the use authority information stored in the database; and

sending the instruction to the authentication server to modify the use authority information stored in the database.

10. A computer readable non-transitory storage medium storing an application program for processing measurement results of a measuring apparatus, wherein the application program comprises:

an input receiving means, in a computer, for receiving input of authentication information used to authenticate a user;

a sending means, in the computer, for sending the authentication information received by the input receiving means to an authentication server arranged in a place different from a facility where the computer is arranged;

an acquiring means, in the computer, for acquiring use authority information of a user who has been successfully authenticated by the authentication server from a database of the authentication server, wherein the database stores use authority information which defines use authority to use objects configuring the application program;

a setting means, in the computer, for setting use restrictions of the application program for the authenticated user based on the use authority information acquired by the acquiring means;

a receiving means, in the computer, for receiving an instruction to modify the use authority information stored in the database, when the acquired use authority information indicates that the authenticated user is allowed to use an object for modifying the use authority information stored in the database; and

wherein the sending means, in the computer, sends the instruction to the authentication server to modify the use authority information stored in the database.