SINGLE LOGIN MULTIPLEXING

• US 20150220725A1
• Filed: 02/06/2014
• Published: 08/06/2015
• Est. Priority Date: 02/06/2014
• Status: Active Grant

• Current Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Original Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Inventors: Strode, Maureen Emily
• Granted Patent: US 9,600,643 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/31 User authentication

Abstract

A method and system for providing access to application, where an association of a plurality of passwords with a login for an account of an application is maintained, wherein each of the plurality of passwords has a corresponding user and a corresponding set of privileges. A request for access to the account is received from a first user including the login and a first password of the plurality of password corresponding to the user, and the user is authenticated in view of the login and the password. Upon authentication of the user, access to the account is granted for the user to execute a corresponding first set of privileges.

Claims

1. A method comprising:

maintaining, by a processing device, an association of a plurality of passwords with a login for an account of an application, wherein each of the plurality of passwords has a corresponding user and a corresponding set of privileges;

receiving, by the processing device, a request for access to the account from a first user comprising the login and a first password of the plurality of passwords corresponding to the first user;

authenticating, by the processing device, the first user in view of the login and the first password; and

upon authentication of the first user, granting, by the processing device, access to the account for the first user to execute a corresponding first set of privileges.

2. The method of claim 1, further comprising:

associating an administrator password with the login, wherein the administrator password corresponds to an administrator and an administrator set of privileges, wherein the administrator set of privileges is different from the first set of privileges and comprises the privilege of associating and dissociating each of the plurality of passwords with the login;

receiving a request for access to the account from the administrator comprising the login and the administrator password;

authenticating the administrator in view of the login and the administrator password; and

upon authentication of the administrator, granting access to the account for the administrator to execute the administrator set of privileges.

3. The method of claim 2, further comprising providing an administrator user interface that displays each of the plurality of passwords, and a corresponding user and a corresponding set of privileges for each of the plurality of passwords.

4. The method of claim 1 further comprising:

receiving a message from the first user for a second user; and

sending the message to the second user.

5. The method of claim 1 further comprising:

providing a user interface that indicates each currently authenticated user in view of a corresponding password.

6. The method of claim 5, wherein the user interface further displays for each currently authenticated user a session length.

7. The method of claim 5, wherein the user interface further displays for each currently authenticated user a user location.

8. A system comprising:

a memory; and

a processing device coupled to the memory to;

maintain an association of a plurality of passwords with a login for an account of an application, wherein each of the plurality of passwords has a corresponding user and a corresponding set of privileges;

receive a request for access to the account from a first user comprising the login and a first password of the plurality of passwords corresponding to the first user;

authenticate the first user in view of the login and the first password; and

upon authentication of the first user, grant access to the account for the first user to execute a corresponding first set of privileges.

9. The system of claim 8, wherein to determine whether the user is allowed to perform the operation, the processing device is further to:

associate an administrator password with the login, wherein the administrator password corresponds to an administrator and an administrator set of privileges, wherein the administrator set of privileges is different from the first set of privileges and comprises the privilege of associating and dissociating each of the plurality of passwords with the login;

receive a request for access to the account from the administrator comprising the login and the administrator password;

authenticate the administrator in view of the login and the administrator password; and

upon authentication of the administrator, grant access to the account for the administrator to execute the administrator set of privileges.

10. The system of claim 9, wherein the processing device is further to provide an administrator user interface that displays each of the plurality of passwords, and a corresponding user and a corresponding set of privileges for each of the plurality of passwords.

11. The system of claim 8, wherein the processing device is further to:

receive a message from the first user for a second user; and

send the message to the second user.

12. The system of claim 8, wherein the processing device is further to:

provide a user interface that indicates each currently authenticated user in view of a corresponding password.

13. The system of claim 12, wherein the user interface further displays for each currently authenticated user a session length.

14. The system of claim 12, wherein the user interface further displays for each currently authenticated user a user location.

15. A non-transitory computer-readable storage medium including instructions that, when executed by a processing device, cause the processing device to perform a set of operations comprising:

maintain an association of a plurality of passwords with a login for an account of an application, wherein each of the plurality of passwords has a corresponding user and a corresponding set of privileges;

receiving a request for access to the account from a first user comprising the login and a first password of the plurality of passwords corresponding to the first user;

authenticating the first user in view of the login and the first password; and

upon authentication of the first user, granting access to the account for the first user to execute a corresponding first set of privileges.

16. The non-transitory computer-readable storage medium of claim 15, wherein the operations further comprise:

associating an administrator password with the login, wherein the administrator password corresponds to an administrator and an administrator set of privileges, wherein the administrator set of privileges is different from the first set of privileges and comprises the privilege of associating and dissociating each of the plurality of passwords with the login;

receiving a request for access to the account from the administrator comprising the login and the administrator password;

authenticating the administrator in view of the login and the administrator password; and

upon authentication of the administrator, granting access to the account for the administrator to execute the administrator set of privileges.

17. The non-transitory computer-readable storage medium of claim 16, wherein the operations further comprise providing an administrator user interface that displays each of the plurality of passwords, and a corresponding user and a corresponding set of privileges for each of the plurality of passwords.

18. The non-transitory computer-readable storage medium of claim 15, wherein the operations further comprise receiving a message from the first user for a second user;

and sending the message to the second user.

19. The non-transitory computer-readable storage medium of claim 15, wherein the operations further comprise providing a user interface that indicates for each currently authenticated user in view of a corresponding password.

20. The non-transitory computer-readable storage medium of claim 19, wherein the user interface further displays for each currently authenticated user a session length.