Patent ID: 6282649
Filing Date: 2001-08-28
Classification: G06F,G06Q,G07F,H04L

Abstract:
A method for controlling user access to data or services via a computer system, including the steps of:storing said data or services in a form of objects in an object oriented programming language accessible only under the control of one or more access keys;providing users with a smartcard containing a user key generator for dynamically generating on the smartcard, from a user's ID entered by the user and key data contained in the smartcard, a user key representing the user's authority level or levels for accessing specific data or services;in response to a user request for access to said stored data or services, determining the access level of the requested data or services; andif the user's authority level as represented by the user key matches the determined access level, generating from said user key an access key for accessing said data or services.