Method and apparatus for securing access to a ladder logic programming and monitoring system

• US 5,127,099 A
• Filed: 06/30/1989
• Issued: 06/30/1992
• Est. Priority Date: 06/30/1989
• Status: Expired due to Term

• Current Assignee: ICOM Incorporated
• Original Assignee: ICOM Incorporated
• Inventors: Zifferer, Scott C., Menter, Joseph J. Jr.
• Primary Examiner(s): Eng, David Y.
• Application Number:
  US07/375,270
• Time in Patent Office: 1,096 Days
• Field of Search: 364/200 MS File, 364/900 MS File, 340/825.3, 340/825.31, 340/825.34, 178/22.08
• US Class Current: 340/5.22
• CPC Class Codes: G05B 19/058 Safety, monitoring
• CPC Class Codes: G05B 2219/24167 Encryption, password, user access privileges
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices

Abstract

The present invention discloses a method of securing access to different functions in a ladder logic programming and monitoring system. Access to various functions of the software package can be controlled using the security system of the software package. When shipped, the security system is disabled. The security system can be activated after a master password is entered for the first time. The person configuring the security system, i.e., the system supervisor, sets up the access rights of all other users. Thereafter, to gain access to the software package, the user must enter his name and unique password. The user can access only those functions assigned to his name and password.

Claims

1. A security system for a software program executed by a computer, the software program having a plurality of operator selectable functions, the security system comprising:

(a) set-up means for defining a user'"'"'s access to the software program and to the operator selectable functions therein, wherein the set-up means comprises means for accepting a user name and password, means for displaying a list of mnemonics corresponding to operator selectable functions, means for selectively adding and deleting mnemonics to and from the list, means for granting and denying access rights to the operator selectable functions in accordance with which mnemonics are displayed in the list, means for associating the access rights with the user name and password, and means for storing the suer name, password, and access rights in memory;

(b) system access means, coupled to the memory, for determining whether an operator can access the software program, wherein the system access means comprises means for comparing an entered user name and password with one or more user names and passwords stored in the memory, and means for granting access to the software program when the entered user name and password match a stored user name and password; and

(c) function access means, coupled to the memory and the system access means, for determining whether the operator can access one or more of the operator selectable functions in the software program, wherein the function access means comprises means for comparing a selected function to the stored access rights associated with the stored user name and password that match the entered user name and password, and means for invoking the selected function when it matches the stored access rights.

2. The system of claim 1, wherein the set-up means further comprises means for defining a master password for accessing the set-up means.

3. The system of claim 2, further comprising means for storing the master password.

4. The system of claim 1, wherein the set-up means further comprises means for enabling and disabling the security system.

5. The system of claim 4, further comprising means for displaying a status of the security system indicating whether it is enabled or disabled.

6. The system of claim 1, wherein the set-up means further comprises means for enabling and disabling a user disk log, wherein commands entered by a user and saved into a file so that the activities of the user can be monitored at a later time.

7. The system of claim 6;

further comprising means for displaying a status of the user disk log.

8. The system of claim 6, further comprising means for printing a copy of the user disk log.

9. The system of claim 6, further comprising means for erasing the user disk log.

10. The system of claim 6, further comprising means for specifying a location for the user disk log.

11. A method of securing a software program executed by a computer, the software program having a plurality of operator selectable functions, the method comprising:

(a) defining a user'"'"'s access to the software program and to the operator selectable functions therein, wherein the defining step comprises accepting a user name and password, displaying a list of mnemonics corresponding to operator selectable functions, selectively adding and deleting mnemonics to and from the list, granting and denying access rights to the operator selectable functions in accordance with which mnemonics are displayed in the list, associating the selected access rights with the user name and password, and storing the user name, password, and selected access rights in memory;

(b) determining whether an operator can access the software program, wherein the determining step comprises comparing an entered user name and password with one or more user names and passwords stored in the memory, and granting access to the software program when the entered user name and password match the stored user name and password; and

(c) determining whether the operator can access one or more of the operator selectable functions in the software program, wherein the determining step comprises comparing a selected function to the stored access rights associated with the stored user name and password that match the entered user name and password, and invoking the selected function when it matches the stored access rights.

12. The method of claim 11, wherein the defining step further comprises defining a master password for accessing the set-up means.

13. The method of claim 12, further comprising storing the master password.

14. The method of claim 11, wherein the defining step further comprises enabling and disabling the security system.

15. The method of claim 14, further comprising displaying a status of the security system indicating whether it is enabled or disabled.

16. The method of claim 11, wherein the defining step further comprises enabling and disabling a user disk log, wherein commands entered by a user are saved into a file so that the activities of the user can be monitored at a later time.

17. The method of claim 16, further comprising displaying a status of the user disk log.

18. The method of claim 16, further comprising printing a copy of the user disk log.

19. The method of claim 16, further comprising erasing the user disk log.

20. The method of claim 16, further comprising specifying a location for the user disk log.