System Security Using Multi-user Control

• US 20160366144A1
• Filed: 06/10/2015
• Published: 12/15/2016
• Est. Priority Date: 06/10/2015
• Status: Abandoned Application

• Current Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Inventors: Ashwood-Smith, Peter, Wan, Tao
• Application Number:
  US14/735,902
• Publication Number:
  US 20160366144A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/40 by quorum, i.e. whereby two or more security principals are required
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol

Abstract

An authorization method comprising receiving command signals from a plurality of controlling accounts, determining whether the number of received command signals meets a threshold, wherein the threshold is at least two, and executing a controlled function in response to the determination. An authorization method comprising accessing a control interface as a first controlling account for a controlled function, communicating command instructions for sending a command with a second controlling account for the controlled function, and sending the command in accordance with the command instructions, wherein sending the command satisfies an authorization condition for executing the controlled function.

Claims

1. An authorization method comprising:

receiving command signals from a plurality of controlling accounts;

determining whether the number of received command signals meets a threshold, wherein the threshold is at least two; and

executing a controlled function in response to the determination.

2. The method of claim 1, wherein each of the command signals is the same command.

3. The method of claim 1, wherein the threshold is at least three.

4. The method of claim 1, further comprising determining whether one or more authorization conditions for the controlled function are satisfied in response to receiving the command signals.

5. The method of claim 4, wherein the authorization conditions indicate a number of command signals from the plurality of controlling accounts to satisfy the authorization conditions.

6. The method of claim 4, wherein the authorization condition indicates a number of authorized locations for the plurality of controlling accounts to satisfy the authorization conditions.

7. The method of claim 4, wherein the authorization conditions indicates a timeout threshold for receiving the command signals from the plurality of controlling accounts.

8. An authorization method comprising:

accessing a control interface as a first controlling account for a controlled function;

communicating command instructions for sending a command with a second controlling account for the controlled function; and

sending the command in accordance with the command instructions, wherein sending the command satisfies an authorization condition for executing the controlled function.

9. The method of claim 8, wherein communicating command instructions with the second controlling account uses in-band communication.

10. The method of claim 8, wherein communicating command instructions with the second controlling account uses out-of-band communication.

11. The method of claim 8, wherein a number of controlling accounts to satisfy the authorization condition is two.

12. The method of claim 8, wherein the authorization condition indicates a number of authorized locations to satisfy the authorization conditions.

13. The method of claim 8, wherein the authorization condition indicates a timeout threshold for sending the command.

14. An apparatus comprising:

a receiver;

a memory; and

a processor coupled to the memory and the receiver, and configured to;

access a control interface as a first controlling account from a set of controlling accounts;

communicate command instructions for sending a command with a second controlling account from the set of controlling accounts;

signal the command in accordance with the command instructions;

receive a second command from the second controlling account in accordance with the command instructions; and

execute a controlled function in response to receiving the second command.

15. The apparatus of claim 14, wherein the processor is configured to determine whether authorization conditions that are associated with the controlled function are satisfied.

16. The apparatus of claim 15, wherein the authorization conditions indicate a number of command signals from the controlling accounts accessing the control interface to satisfy the authorization conditions.

17. The apparatus of claim 15, wherein the authorization conditions indicate a minimum number of command signals from the controlling accounts accessing the control interface to satisfy the authorization conditions.

18. The apparatus of claim 15, wherein the authorization condition indicate a number of authorized locations to satisfy the authorization conditions.

19. The apparatus of claim 14, wherein the first command and the second command are the same.

20. The apparatus of claim 14, wherein communicating command instructions with the second controlling account from the set of controlling accounts comprises using in-band communication, out-of-band communication, or both.