Computer system with access control mechanism

• US 20020059236A1
• Filed: 12/21/2000
• Published: 05/16/2002
• Est. Priority Date: 12/28/1999
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Satoh, Yoshihiro
• Granted Patent: US 6,928,439 B2
• Time in Patent Office: Days
• US Class Current: 707/9
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: Y10S 707/922 Communications
• CPC Class Codes: Y10S 707/99931 Database or file accessing
• CPC Class Codes: Y10S 707/99939 Privileged access

Abstract

According to the present invention, a computer system with a mechanism for controlling the access rights for data to be used in common by multiple users, which includes: data storage for storing the data in common; an access management table including access management data for controlling access rights for the data in common; and control means for updating the access management data in response to communication from a user who is authorized to grant access rights. Included in the data in the access management table is information for data to be accessed, identification information for a user who has been granted access rights, access level information and identification information for the user who grants the access rights.

Claims

1. A computer system for controlling access to data to be used in common by multiple users, comprising:

data storage for storing said data in common;

an access management table including access management data to control an access right to said data in common; and

control means for updating said access management data in said access management table, in response to communication, in which reference information to said data in common are included, from a first user who is authorized to grant an access right to said data to a second user.

2. The computer system according to claim 1, wherein said access management data in said access management table includes identification information for data to be accessed, identification information for said second user to whom the access right to said data has been granted, and access level information.

3. The computer system according to claim 2, wherein said access management data in said access management table includes identification information for said first user who grants the access right.

4. The computer system according to claim 3, wherein said control means updates said access management data in response to a command that is issued during said communication.

5. A communication system comprising:

the computer system according to claim 4; and

a plurality of user terminals for communicating with said computer system.

6. The computer system according to claim 2, wherein said control means updates said access management data in response to a command that is issued during said communication.

7. The computer system according to claim 1, wherein said control means updates said access management data in response to a command that is issued during said communication.

8. A communication system comprising:

a computer system for controlling access to data to be used in common by multiple users, comprising;

data storage for storing said data in common;

an access management table including access management data to control an access right to said data in common; and

control means for updating said access management data in said access management table, in response to communication, in which reference information to said data in common are included, from a first user who is authorized to grant an access right to said data to a second user; and

a plurality of user terminals for communicating with said computer system.