Computer system with access control mechanism

• US 6,928,439 B2
• Filed: 12/21/2000
• Issued: 08/09/2005
• Est. Priority Date: 12/28/1999
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Satoh, Yoshihiro
• Primary Examiner(s): Rones, Charles
• Assistant Examiner(s): Mahmoudi, Hassan
• Application Number:
  US09/745,897
• Publication Number:
  US 20020059236A1
• Time in Patent Office: 1,692 Days
• Field of Search: 707/9, 707/1, 707/3, 707/5, 707/104.1, 707/103.Y, 707/10, 709/203, 709/219, 709/202, 710/200
• US Class Current: 726/4
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: Y10S 707/922 Communications
• CPC Class Codes: Y10S 707/99931 Database or file accessing
• CPC Class Codes: Y10S 707/99939 Privileged access

Abstract

According to the present invention, a computer system with a mechanism for controlling the access rights for data to be used in common by multiple users, which includes: data storage for the storing data in common; an access management table including access management data for controlling access rights for the data in common; and control mechanism for updating the access management data in response to communication from a user who is authorized to grant access rights. Included in the data in the access management table is information for data to be accessed, identification information for a user who has been granted access rights, access level information and identification information for the user who grants the access rights.

Claims

1. A computer system for controlling access to data to be used in common by multiple users, comprising:

data storage for storing said data in common;

an access management table including access management data to control an access right to said data in common; and

control means for automatically updating said access management data in said access management table, concurrent with and in response to transmitting a communication, in which reference information to said data in common are included, from a first user who is authorized to grant an access right to said data to a second user, wherein the second user is granted the access right to said data pursuant to the automatic updating of said access management data responsive to the transmitting of the communication.

2. The computer system according to claim 1, wherein said access management data in said access management table includes identification information for data to be accessed, identification information for said second user to whom the access right to said data has been granted, and access level information.

3. The computer system according to claim 2, wherein said access management data in said access management table includes identification information for said first user who grants the access right to the second user.

4. The computer system according to claim 3, wherein said control means automatically updates said access management data in response to a command that is automatically issued during said transmitting of the communication.

5. The computer system according to claim 4, further comprising a plurality of user terminals for communicating with said computer system.

6. The computer system according to claim 2, wherein said control means automatically updates said access management data in response to a command that is automatically issued during said transmitting of the communication.

7. The computer system according to claim 1, wherein said control means automatically updates said access management data in response to a command that is automatically issued during said transmitting of the communication.

8. The computer system according to claim 1, wherein said access management table resides on a server external to the first user and the second user.

9. A communication system comprising:

a computer system for controlling access to data to be used in common by multiple users, comprising;

data storage for storing said data in common;

an access management table including access management data to control an access right to said data in common; and

control means for automatically updating said access management data in said access management table, concurrent with and in response to transmitting a communication, in which reference information to said data in common are included, from a first user who is authorized to grant an access right to said data to a second user, wherein the second user is granted the access right to said data pursuant to the automatic updating of said access management data responsive to the transmitting of the communication.; and

a plurality of user terminals for communicating with said computer system.