Patent ID: 7945951
Filing Date: 2011-05-17
Classification: G06F

Abstract:
1. A method implemented at least in part by a computer, comprising: intercepting, by one of a controlled-access application or operating system security, a first task comprising a non-user initiated attempt to install an application downloaded over the internet prior to the first task being performed, in order to check the first task against rights of a user; identifying a second task; calling, by one of the controlled-access application or the operating system security, a rights elevator to begin a process of user rights elevation; receiving, from the user currently logged on to a computer operating system with a single user account having both a limited-rights context and a higher-rights context and while the single user account is operating within the limited-rights context that has rights insufficient to permit the first task and the second task, the user's assent to perform a task not permitted by the limited-rights context, wherein the user's assent is indicated by user entry of a secure access sequence comprising a simultaneous keystroke activation of more than one key to elevate the rights of the single user account to the higher rights context of the single user account; following entry of the secure access sequence and prior to an act of elevating the context of the single user account, enabling the assent via receiving a user entry in addition to the secure access sequence; responsive to the entry of the secure access sequence, initiating a process to minimally elevate rights of the single user account to the higher-rights context of the single user account, wherein the higher-rights context of the single user account minimally permits the first task without elevating the rights to another higher-rights context that would minimally permit the second task; and elevating the context of the single user account from the limited-rights context to the higher-rights context effective to permit the first task, following entry of the secure access sequence and completion of the process to minimally elevate rights.