Controlling access within a protected data environment

摘要

User access is controlled through a computer network within a protected data environment of a computer environment. An exception list comprising an Identifier stored within the protected data environment for granting user access of an unauthorized user is defined. At least one allowed access property relation for user access is defined when accessed by the unauthorized user. An Identifier of a user access request of the unauthorized user is checked in the exception list. A One-Time Identifier is created. The One-Time Identifier is assigned to the electronic data resource according to the allowed property relation. The requested resource is delivered to the unauthorized user by using the assigned One-Time Identifier.

主权项

1. A resource access control method for controlling a user access through a computer network to an electronic resource stored within a protected data environment of a computer environment, the method comprising:
defining an exception list comprising a Uniform Resource Identifier (URI), said URI associated with said electronic resource stored within said protected data environment, said URI allowing a non-authenticated user access to said electronic resource; defining an allowed access property relation for user access to said electronic resource when accessed by said non-authenticated user; checking a URI of a user access request of said non-authenticated user to said electronic resource with a corresponding entry in the exception list; creating a One-Time URI and assigning said One-Time URI to said electronic resource according to said allowed access property relation; and delivering the requested electronic resource to said non-authenticated user by using the assigned One-Time URI without authenticating said non-authenticated user.