MANAGING AND CONTROLLING ADMINISTRATOR ACCESS TO MANAGED COMPUTER SYSTEMS

• US 20140090022A1
• Filed: 09/27/2012
• Published: 03/27/2014
• Est. Priority Date: 09/27/2012
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Anderson, Eric, Dawson, Christopher J., Nelson, Leslie A., Singletary, Brett W.
• Granted Patent: US 8,839,400 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/50 Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices

Abstract

A method and computer program product for managing and controlling access of an administrator to a managed computer system. At least one computer program on an access system of the managed computer system receives from the administrator a request for access to the managed computer system and requests a managing computer system to search open tickets for service management. In response to that the open tickets are not found, the at least one computer program redirects the administrator to log onto the managing computer system to obtain a new open ticket for the access. In response to that the open tickets are found, the at least one computer program requests the administrator to choose at least one ticket from the open tickets and grants the administrator the access to the managed computer system in response to determining that the at least one ticket is valid.

Claims

1. A method for managing and controlling access of an administrator to a managed computer system, the method implemented by at least one computer program on an access system of the managed computer system, the method comprising:

receiving, from the administrator, a request for access to the managed computer system;

requesting a managing computer system to search open tickets which are managed by the managing computer system for the managed computer system;

requesting the administrator to choose at least one ticket from the open tickets, in response to that the open tickets are found;

checking, in response to that the administrator chooses the at least one ticket from the open tickets, status of the at least one ticket to determine whether the at least one ticket is valid; and

granting the administrator the access to the managed computer system, in response to determining that the at least one ticket is valid.

2. The method of claim 1, further comprising:

denying the administrator the access to the managed computer system, in response to determining that the at least one ticket is not valid.

3. The method of claim 1, further comprising:

allowing the administrator read-only access to the managed computer system, in response to determining that the at least one ticket is not valid.

4. The method of claim 1, further comprising:

redirecting the administrator to log onto the managing computer system, in response to that the open tickets are not found;

receiving, from the managing computer system, a ticket generated by the managing computer system; and

granting the administrator the access to the managed computer system.

5. The method of claim 1, further comprising:

redirecting the administrator to log onto the managing computer system, in response to that the administrator does not choose the at least one ticket from the open tickets;

receiving, from the managing computer system, a ticket generated by the managing computer system; and

granting the administrator the access to the managed computer system.

6. The method of claim 1, further comprising:

recording on a log the access of the administrator; and

transferring information of the log to the managing computer system.

7. The method of claim 1, wherein the access system is a firewall to the managed computer system, a proxy server, or a virtual private network server, and wherein the access system is an entry point to one or more managed computer systems.

8. A method for managing and controlling access of an administrator to a managed computer system, the method implemented by at least one computer program on an access system of the managed computer system, the method comprising:

receiving, from the administrator, a request for access to the managed computer system;

requesting a managing computer system to search open tickets which are managed by the managing computer system for the managed computer system;

redirecting the administrator to log onto the managing computer system, in response to that the open tickets are not found;

receiving, from the managing computer system, a ticket generated by the managing computer system; and

granting the administrator the access to the managed computer system.

9. The method of claim 8, further comprising:

requesting the administrator to choose at least one ticket from the open tickets, in response to that the open tickets are found;

checking, in response to that the administrator chooses the at least one ticket from the open tickets, status of the at least one ticket to determine whether the at least one ticket is valid; and

granting the administrator the access to the managed computer system, in response to determining that the at least one ticket is valid.

10. The method of claim 9, further comprising:

denying the administrator the access to the managed computer system, in response to determining that the at least one ticket is not valid.

11. The method of claim 9, further comprising:

allowing the administrator read-only access to the managed computer system, in response to determining that the at least one ticket is not valid.

12. The method of claim 9, further comprising:

redirecting the administrator to log onto the managing computer system, in response to that the administrator does not choose the at least one ticket from the open tickets;

receiving, from the managing computer system, a ticket generated by the managing computer system; and

granting the administrator the access to the managed computer system.

13. The method of claim 8, further comprising:

recording on a log the access of the administrator; and

transferring information of the log to the managing computer system.

14. The method of claim 8, wherein the access system is a firewall to the managed computer system, a proxy server, or a virtual private network server, and wherein the access system is an entry point to one or more managed computer systems.

15. A computer program product for managing and controlling access of an administrator to a managed computer system, the computer program product comprising:

one or more computer-readable tangible storage devices and program instructions stored on at least one of the one or more tangible storage devices, the program instructions comprising;

program instructions to receive, from the administrator, a request for access to the managed computer system;

program instructions to request a managing computer system to search open tickets which are managed by the managing computer system for the managed computer system;

program instructions to request the administrator to choose at least one ticket from the open tickets, in response to that the open tickets are found;

program instructions to check, in response to that the administrator chooses the at least one ticket from the open tickets, status of the at least one ticket to determine whether the at least one ticket is valid; and

program instructions to grant the administrator the access to the managed computer system, in response to determining that the at least one ticket is valid.

16. The computer program product of claim 15, further comprising:

program instructions to deny the administrator the access to the managed computer system, in response to determining that the at least one ticket is not valid.

17. The computer program product of claim 15, further comprising:

program instructions to allow the administrator read-only access to the managed computer system, in response to determining that the at least one ticket is not valid.

18. The computer program product of claim 15, further comprising:

program instructions to redirect the administrator to log onto the managing computer system, in response to that the open tickets are not found;

program instructions to receive, from the managing computer system, a ticket generated by the managing computer system; and

program instructions to grant the administrator the access to the managed computer system.

19. The computer program product of claim 15, further comprising:

program instructions to redirect the administrator to log onto the managing computer system, in response to that the administrator does not choose the at least one ticket from the open tickets;

program instructions to receive, from the managing computer system, a ticket generated by the managing computer system; and

program instructions to grant the administrator the access to the managed computer system.

20. The computer program product of claim 15, further comprising:

program instructions to record on a log the access of the administrator; and

program instructions to transfer information of the log to the managing computer system.