Implementing secured, event-based layered logout from a computer system

摘要

A secure, layered logout of a user session is implemented in a management tool. A logout strategy includes a set of security levels of varying sensitivity, with each security level having a set of permissions enforced upon occurrence of an event. A succeeding security level in the set of security levels is reached upon occurrence of an event associated with that level, in which case the set of permissions associated with the level are then enforced against at least one object while the user session continues. As each next level is reached, the permissions associated with the level are then enforced while the user session continues. The logout may enforce different permissions with respect to different objects. If the user takes no action, eventually a final security level will occur, at which point the user session is finally terminated.

主权项

1. Apparatus to provide a structured logout from a user session, comprising:
a processor; computer memory holding computer program instructions that when executed by the processor perform a method comprising:
providing a logout strategy to include a set of predefined, ordered security levels of varying sensitivity, each security level having a set of permissions associated therewith and that are enforced upon occurrence of an event, and wherein each succeeding security level in the set of predefined, ordered security levels is reached as an event associated with the succeeding security level occurs;upon occurrence of an event associated with a security level, enforcing the set of permissions associated with the security level against at least one managed object while continuing the user session; andupon reaching a final security level of the set of security levels, ending the user session.