Elevating rights
First Claim
Patent Images
1. A method implemented at least in part by a computer, comprising:
- intercepting a first task comprising a non-user initiated attempt to install an application downloaded over the internet prior to the first task being performed in order to check the first task against rights of a user;
identifying a second task;
contacting a rights elevator to begin a process for elevating the user'"'"'s rights;
responsive to the user currently being logged on to the computer'"'"'s operating system with an account having rights insufficient to permit the first task or the second task, prompting the user to enter a secure access sequence to elevate the rights of the user to a higher-rights context of the account, wherein the secure access sequence comprises simultaneous keystroke activation of more than one key;
following entry of the secure access sequence and prior to elevating the rights of the user, enabling the user to assent to permit the first task through a user entry in addition to the secure access sequence;
responsive to entry of the secure access sequence, initiating a process to minimally elevate the rights of the user to the higher-rights context of the account that minimally permits the first task without elevating the rights to another higher-rights context that would minimally permit the second task; and
elevating the rights of the user effective to permit the first task, following entry of the secure access sequence and completion of the process to minimally elevate rights.
2 Assignments
0 Petitions
Accused Products
Abstract
System(s), techniques, and/or method(s) (“tools”) are described that enable a user to elevate his or her rights. The tools may do so by switching a user to an account having higher rights or a different, higher-rights context of a same account. The tools may elevate a user'"'"'s rights after a user enters a secure access sequence, such as Control+Alt+Delete, clicks on a button, or enters credentials. The tools may also enable a user to identify tasks that need higher rights to be performed by visually correlating graphic indicia with these tasks.
-
Citations
19 Claims
-
1. A method implemented at least in part by a computer, comprising:
-
intercepting a first task comprising a non-user initiated attempt to install an application downloaded over the internet prior to the first task being performed in order to check the first task against rights of a user; identifying a second task; contacting a rights elevator to begin a process for elevating the user'"'"'s rights; responsive to the user currently being logged on to the computer'"'"'s operating system with an account having rights insufficient to permit the first task or the second task, prompting the user to enter a secure access sequence to elevate the rights of the user to a higher-rights context of the account, wherein the secure access sequence comprises simultaneous keystroke activation of more than one key; following entry of the secure access sequence and prior to elevating the rights of the user, enabling the user to assent to permit the first task through a user entry in addition to the secure access sequence; responsive to entry of the secure access sequence, initiating a process to minimally elevate the rights of the user to the higher-rights context of the account that minimally permits the first task without elevating the rights to another higher-rights context that would minimally permit the second task; and elevating the rights of the user effective to permit the first task, following entry of the secure access sequence and completion of the process to minimally elevate rights. - View Dependent Claims (2, 3, 4, 5, 16, 17)
-
-
6. One or more computer-readable storage media, wherein the computer-readable storage media exclude propagating carrier waves, the computer-readable storage media having computer-readable instructions encoded thereon, that, when executed by a computing device, configure the computing device to perform operations comprising:
-
presenting a user interface simultaneously comprising; a first task; a second task; a first indicia indicating a need to elevate current user rights to rights sufficient to perform the first task and not sufficient to perform the second task, the first indicia being selectable to initiate a process to elevate the rights to perform the first task corresponding to the first indicia and not the second task; and a second indicia indicating a need to elevate the current user rights to rights sufficient to perform the second task and not sufficient to perform the first task, the second indicia being selectable to initiate a process to elevate the rights to perform the second task corresponding to the second indicia and not the first task;
identifying the first task or the second task as comprising a non-user initiated attempt to execute instructions from the internet; andresponsive to receiving a selection of the first indicia, initiating the process to elevate the rights to rights sufficient to perform the first task corresponding to selected indicia but not unlimited rights. - View Dependent Claims (7, 8, 13, 14, 18, 19)
-
-
9. One or more computer-readable storage media, wherein the computer-readable storage media exclude propagating carrier waves, the computer-readable storage media having computer-readable instructions encoded thereon, that, when executed by a computing device, configure the computing device to perform operations comprising:
-
presenting a first operating system user interface comprising a graphical indication of a single user account having a limited-rights context and a higher-rights context; while the user account is operating within the limited-rights context; presenting a graphical indication on the first operating system user interface that a task comprising a non-user initiated attempt to install an application downloaded over the internet requires assent to permit the task, and enabling selection of the graphical indication to initiate a process to assent to permit the task; and presenting a second operating system user interface enabling performance of the task responsive to receiving the assent to permit the task, wherein the assent to permit the task facilitates operating within the higher-rights context of the single user account to permit the task and the higher-rights context of the single user account is not sufficient to permit another task. - View Dependent Claims (10, 11, 12, 15)
-
Specification