Visual access to restricted functions represented on a graphical user interface

• US 5,821,933 A
• Filed: 09/14/1995
• Issued: 10/13/1998
• Est. Priority Date: 09/14/1995
• Status: Expired due to Term

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Pickover, Clifford Alan, Keller, Neal Martin
• Primary Examiner(s): Huynh, Ba
• Application Number:
  US08/528,376
• Time in Patent Office: 1,125 Days
• Field of Search: 395/348, 395/349, 395/350, 395/351, 340/571, 340/653, 340/666, 340/691, 380/3, 380/4, 380/52, 345/327, 345/329, 345/331, 345/332, 345/348, 345/349, 345/350, 345/351, 707/1, 707/6, 707/8, 707/9
• US Class Current: 715/741
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 3/04817 using icons graphical or visual programming using iconic symbols G06F8/34
• CPC Class Codes: Y10S 707/99939 Privileged access

Abstract

Computer users access and/or execute a selected restricted function on a computer using a graphical user interface (GUI) by entering an iconic password that is defined by selecting two or more visual icons, called code icons, in a sequence called an iconic password sequence. The entered sequence is compared to a target sequence that represents the restricted function. If the entered sequence matches the target sequence, the user is permitted to execute/access the restricted function. The number of possible combinations in the target sequence, and therefore system security, can be increased by inputting both a code icon and a target site for one or more of the components of the target sequence.

Claims

1. A computer system with a computer memory and a central processing system operating under an operating system with a graphical user interface having icons representing various functions to be performed, said computer system being characterized by having a security code access system comprising:

a) code selection means including;

i) a plurality of code icons appearing of the graphical user interface,

ii) a plurality of target sites and

iii) selection means for use in a security process which includes selecting two or more code icons among the plurality of code icons in a selection sequence and moving them to at least one target site of the plurality of target sites,

b) a security code access sequence, including at least one target site, stored in the computer memory;

c) comparison means for comparing the selection sequence to the access sequence; and

d) a restricted function capable of being executed on the central processing unit only when the comparison means indicates that the selection sequence matches the access sequence so that access to and use of the restricted function is limited to users who select the code icons in the security code access sequence.

2. The computer system of claim 1 wherein said at least one target site is one of said code icons.

3. The computer system of claim 1 including an additional icon other than a code icon and said target site is said additional icon.

4. The computer system of claim 3 wherein the additional icon is not representative of said restricted function.

5. The computer system of claim 3 wherein said additional icon is a receptor tree icon.

6. The computer system of claim 3 wherein said additional icon is representative of the restricted function.

7. The computer system of claim 1 wherein said selection means is means for dragging and dropping the code icons on said at least one target site.

8. The computer system of claim 7 wherein said at least one target site is receptor tree icon in which there are more receptor locations than the number of code icons in the selection sequence to be placed in the receptor locations to match the security code sequence.

9. The computer system of claim 8 wherein said security code sequence includes placing each code icons in only a preselected one of said receptor locations.

10. The computer system of claim 7 wherein said security code access sequence includes a subsequence involving placing in sequence one or more code icons on a target site and said security code sequence includes said subsequence combined with at least one more target site or one more code icon.

11. In a computer system with a computer memory and a central processing system operating under an operating system with a graphical user interface having icons representing various functions to be performed, said computer system being characterized by method for a security code access procedure comprising:

a) providing a plurality of code icons and target sites on said graphical user interface and having selection means for use in a selection process involving choosing two or more of the code icons and moving them to at least one of the target sites among the plurality of code icons and target sites in a selection sequence;

b) storing a sequence constituting a security access code of two or more code icons and at least one target site in the computer memory;

c) comparing the icons and at least one target site selected and the order of their selection in the selection sequence with the sequence constituting the security access code;

d) allowing access to a restricted function only when the comparison indicates that the icons selected and the order of their selection in the selection sequence matches the access sequence to limit access to the restricted function to users selecting the code icons in the access code sequence.

12. The method of claim 11 including dragging and dropping the selected code icons on the at least one target site in the selection sequence.

13. The method of claim 12 including using a receptor tree icon which has more receptor locations than the number of code icons in the selection sequence to be placed in the receptor locations to match the security code sequence.

14. The method of claim 13 including the placement of each code icons in only a preselected one of said receptor locations.

15. The method of claim 13 wherein the security access code sequence includes a subsequence involving placing one or more code icons on a target site, wherein the security access code sequence includes combining said subsequence with at least one more target site or one more code icon in the security code sequence.