SYSTEM FOR AUGMENTING ACCESS TO RESOURCES

• US 20110277012A1
• Filed: 05/07/2010
• Published: 11/10/2011
• Est. Priority Date: 05/07/2010
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Hambridge, Christopher A., Carter, Bernadette A., Chakra, Al, Love, Oriana J.
• Application Number:
  US12/775,520
• Publication Number:
  US 20110277012A1
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 11/3058 Monitoring arrangements for monitoring environmental properties or parameters of the computing system or of the computing system component, e.g. monitoring of power, currents, temperature, humidity, position, vibrations thermal management in cooling arrangements of a computing system G06F1/206
• CPC Class Codes: G06F 11/3438 monitoring of user actions tracking the activity of the user H04L67/535
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

The different illustrative embodiments provide a method, data processing system, and computer program product for managing access to resources. A number of access permissions of a first user to a number of resources in a computer system are provided to a second user in response to a presentation of first credentials for the first user to the computer system. A level of presence of the first user relative to the computer system and/or the second user is monitored. The number of access permissions of the first user to the number of resources in the computer system continues to be provided to the second user as long as a preselected level of presence of the first user is present.

Claims

1. A method for managing access to resources, the method comprising:

responsive to a presentation of first credentials for a first user to a computer system, providing, by the computer system, a second user a number of access permissions of the first user to a number of resources in the computer system;

monitoring, by the computer system, a level of presence of the first user relative to the computer system; and

continuing to provide, by the computer system, the second user the number of access permissions of the first user to the number of resources in the computer system as long as a preselected level of presence of the first user is present.

2. The method of claim 1 further comprising:

ceasing to provide the second user the number of access permissions of the first user to the number of resources in the computer system in response to an event using a policy even though the preselected level of presence of the first user is present.

3. The method of claim 1, wherein the level of presence is a collaboration proximity.

4. The method of claim 1, wherein the monitoring step comprises:

monitoring the level of presence of the first user relative to the computer system using a biometric sensor system.

5. The method of claim 1, wherein the number of access permissions of the first user is a portion of a plurality of access permissions of the first user and further comprising:

responsive to an event, adding additional access permissions from the plurality of access permissions of the first user to the number of access permissions of the first user provided to the second user.

6. The method of claim 5, wherein the event is a completion of a portion of a training session.

7. The method of claim 1, wherein the number of access permissions is a first number of access permissions and the number of resources is a first number of resources, and further comprising:

responsive to a presentation of second credentials for a third user to the computer system, providing the second user a second number of access permissions of the third user to a second number of resources in the computer system in addition to the first number of access permissions;

monitoring a level of presence of the third user relative to the computer system; and

continuing to provide the second user the second number of access permissions of the third user to the second number of resources in the computer system as long as a preselected level of presence of the third user is present.

8. The method of claim 1, wherein the number of resources is an application.

9. A data processing system comprising:

a bus;

a communications unit connected to the bus;

a storage device connected to the bus, wherein the storage device includes program code; and

a processor unit connected to the bus, wherein the processor unit runs the program code to provide a second user a number of access permissions of a first user to a number of resources in a computer system in response to a presentation of first credentials for the first user to the computer system;

monitor a level of presence of the first user relative to the computer system; and

continue to provide the second user the number of access permissions of the first user to the number of resources in the computer system as long as a preselected level of presence of the first user is present.

10. The data processing system of claim 10, wherein the processor unit further runs the program code to cease to provide the second user the number of access permissions of the first user to the number of resources in the computer system in response to an event using a policy even though the preselected level of presence of the first user is present.

11. A computer program product for managing access to resources, the computer program product comprising:

a computer recordable storage medium;

program code, stored on the computer recordable storage medium, for providing a second user a number of access permissions of the a user to a number of resources in the computer system in response to a presentation of first credentials for the first user to a computer system;

program code, stored on the computer recordable storage medium,

program code, stored on the computer recordable storage medium, for monitoring a level of presence of the first user relative to the computer system; and

program code, stored on the computer recordable storage medium, for continuing to provide the second user the number of access permissions of the first user to the number of resources in the computer system as long as a preselected level of presence of the first user is present.

12. The computer program product of claim 11 further comprising:

program code, stored on the computer recordable storage medium, for ceasing to provide the second user the number of access permissions of the first user to the number of resources in the computer system in response to an event using a policy even though the preselected level of presence of the first user is present.

13. The computer program product of claim 11, wherein the level of presence is a collaboration proximity.

14. The computer program product of claim 11, wherein the monitoring step comprises:

program code, stored on the computer recordable storage medium, for monitoring the level of presence of the first user relative to the computer system using a biometric sensor system.

15. The computer program product of claim 11, wherein the number of access permissions of the first user is a portion of a plurality of access permissions of the first user and further comprising:

program code, stored on the computer recordable storage medium, for adding additional access permissions from the plurality of access permissions of the first user to the number of access permissions of the first user provided to the second user in response to an event.

16. The computer program product of claim 15, wherein the event is a completion of a portion of a training session.

17. The computer program product of claim 11, wherein the number of access permissions is a first number of access permissions and the number of resources is a first number of resources, and further comprising:

program code, stored on the computer recordable storage medium, for providing the second user a second number of access permissions of a third user to a second number of resources in the computer system in addition to the first number of access permissions in response to a presentation of second credentials for the third user to the computer system;

program code, stored on the computer recordable storage medium, for monitoring a level of presence of the third user relative to the computer system; and

program code, stored on the computer recordable storage medium, for continuing to provide the second user the second number of access permissions of the third user to the second number of resources in the computer system as long as a preselected level of presence of the third user is present.

18. The computer program product of claim 11, wherein the number of resources is an application.

19. The computer program product of claim 11, wherein the program code is stored on the computer recordable storage medium in a data processing system, and wherein the program code is downloaded over a network from a remote data processing system to the data processing system.

20. The computer program product of claim 11, wherein the program code is stored on the computer recordable storage medium in a server data processing system, and wherein the program code is downloaded over a network to a remote data processing system for use in a second computer readable storage medium with the remote data processing system.