METHOD AND SYSTEM FOR MANAGING AND CONTROLLING DIRECT ACCESS OF AN ADMINISTRATOR TO A COMPUTER SYSTEM

• US 20140237588A1
• Filed: 02/19/2013
• Published: 08/21/2014
• Est. Priority Date: 02/19/2013
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Dawson, Christopher J., Nelson, Leslie A., Singletary, Brett W., Anderson, Eric M.
• Granted Patent: US 9,038,169 B2
• Time in Patent Office: Days
• US Class Current: 726/19
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database

Abstract

A method and computer program product for managing and controlling direct access of an administrator to a computer system. At least one computer program on the computer system receives from the administrator a request for the direct access to the managed computer system directly from the system console and requests a service management system to search open tickets. In response to that the open tickets are found, the at least one computer program requests the administrator to choose at least one ticket from the open tickets and grants the administrator the direct access to the computer system in response to determining that the at least one ticket is valid.

Claims

1. A method for managing and controlling direct access of an administrator to a computer system, the method implemented by at least one computer program on the computer system, the method comprising:

receiving, from the administrator, a request for the direct access to the computer system;

requesting a service management system to search open tickets;

requesting the administrator to choose at least one ticket from the open tickets, in response to that the open tickets are found;

checking status of the at least one ticket to determine whether the at least one ticket is valid; and

granting the administrator the direct access to the computer system, in response to determining that the at least one ticket is valid.

2. The method of claim 1, wherein the direct access of the administrator to the computer system is through a system console, or through a mechanism of bypassing boundary check.

3. The method of claim 1, further comprising:

denying the administrator the direct access to the computer system, in response to determining that the at least one ticket is not valid.

4. The method of claim 1, further comprising:

allowing the administrator read-only access to the computer system, in response to determining that the at least one ticket is not valid.

5. The method of claim 1, further comprising:

redirecting the administrator to log onto the service management system, in response to that the open tickets are not found;

receiving, from the service management system, a ticket generated by the service management system; and

granting the administrator the direct access to the computer system.

6. The method of claim 1, further comprising:

redirecting the administrator to log onto the service management system, in response to that the administrator requests for a ticket generated by the service management system;

receiving, from the service management system, the ticket generated by the service management system; and

granting the administrator the direct access to the computer system.

7. The method of claim 1, further comprising:

recording on a log the direct access of the administrator; and

transferring information of the log to the service management system.

8. A computer program product for managing and controlling direct access of an administrator to a computer system, the computer program product comprising:

one or more computer-readable tangible storage devices and program instructions stored on at least one of the one or more computer-readable tangible storage devices, the program instructions comprising;

program instructions to receive, from the administrator, a request for the direct access to the computer system;

program instructions to request a service management system to search open tickets;

program instructions to request the administrator to choose at least one ticket from the open tickets, in response to that the open tickets are found;

program instructions to check status of the at least one ticket to determine whether the at least one ticket is valid; and

program instructions to grant the administrator the direct access to the computer system, in response to determining that the at least one ticket is valid.

9. The computer program product of claim 8, wherein the direct access of the administrator to the computer system is through a system console, or through a mechanism of bypassing boundary check.

10. The computer program product of claim 8, further comprising:

program instructions to deny the administrator the direct access to the computer system, in response to determining that the at least one ticket is not valid.

11. The computer program product of claim 8, further comprising:

program instructions to allow the administrator read-only access to the computer system, in response to determining that the at least one ticket is not valid.

12. The computer program product of claim 8, further comprising:

program instructions to redirect the administrator to log onto the service management system, in response to that the open tickets are not found;

program instructions to receive, from the service management system, a ticket generated by the service management system; and

program instructions to grant the administrator the direct access to the computer system.

13. The computer program product of claim 8, further comprising:

program instructions to redirect the administrator to log onto the service management system, in response to that the administrator requests for a ticket generated by the service management system;

program instructions to receive, from the service management system, the ticket generated by the service management system; and

program instructions to grant the administrator the direct access to the computer system.

14. The computer program product of claim 8, further comprising:

program instructions to record on a log the direct access of the administrator; and

program instructions to transfer information of the log to the service management system.

15. A computer system for managing and controlling direct access of an administrator to a computer system, the computer system comprising:

one or more processors, one or more computer-readable tangible storage devices, and program instructions stored on at least one of the one or more computer-readable tangible storage devices for execution by at least one of the one or more processors, the program instructions comprising;

program instructions to receive, from the administrator, a request for the direct access to the computer system;

program instructions to request a service management system to search open tickets;

program instructions to request the administrator to choose at least one ticket from the open tickets, in response to that the open tickets are found;

program instructions to check status of the at least one ticket to determine whether the at least one ticket is valid; and

program instructions to grant the administrator the direct access to the computer system, in response to determining that the at least one ticket is valid.

16. The computer system of claim 15, wherein the direct access of the administrator to the computer system is through a system console, or through a mechanism of bypassing boundary check.

17. The computer system of claim 15, further comprising:

program instructions to deny the administrator the direct access to the computer system, in response to determining that the at least one ticket is not valid.

18. The computer system of claim 15, further comprising:

program instructions to allow the administrator read-only access to the computer system, in response to determining that the at least one ticket is not valid.

19. The computer system of claim 15, further comprising:

program instructions to redirect the administrator to log onto the service management system, in response to that the open tickets are not found;

program instructions to receive, from the service management system, a ticket generated by the service management system; and

program instructions to grant the administrator the direct access to the computer system.

20. The computer system of claim 15, further comprising:

program instructions to redirect the administrator to log onto the service management system, in response to that the administrator requests for a ticket generated by the service management system;

program instructions to receive, from the service management system, the ticket generated by the service management system; and

program instructions to grant the administrator the direct access to the computer system.

21. The computer system of claim 15, further comprising:

program instructions to record on a log the direct access of the administrator; and

program instructions to transfer information of the log to the service management system.