The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Nov. 30, 2004
Filed:
Jan. 04, 2000
Daniel Edward House, Raleigh, NC (US);
Shaw-Ben Shepherd Shi, Austin, TX (US);
Richard Lee Daugherty, Cary, NC (US);
John Ryan McGarvey, Apex, NC (US);
Chandra Paul Immanuel, Durham, NC (US);
International Business Machines Corporation, Armonk, NY (US);
Abstract
The present invention provides an improved method and system for unobtrusively achieving secure cross-platform access in a heterogeneous network environment. In a system aspect, the system includes a plurality of heterogeneous computer systems, at least two of the computer systems including a system specified user identification; and an enterprise directory service, the enterprise directory service being shared by the plurality of computer systems to provide for the formation of an enterprise group, the enterprise directory service including at least one enterprise user which is associated with system specified user identification from the at least two of the computer systems. The system in the network in accordance with the present invention may perform cooperative programming with other systems in the same enterprise group. Systems within the same enterprise group are allowed to define enterprise users between them. Enterprise groups establish boundaries of who can and cannot share enterprise user definitions. They also establish administrative groups of systems. They establish where trusted directory servers must, can, and cannot reside. They also establish which enterprise directory service adapter can interact, i.e., scope of impersonation. By allowing for the grouping of systems, access to systems in the network may be more readily controlled. Unnecessary or undesirable access may be minimized.