Patent ID: 7500106
Filing Date: 2009-03-03
Classification: G06F

Abstract:
1. A method for identifying, authenticating and authorizing a user of protected data, comprising: identifying the user by a user ID entered by the user in an input field in a login area comprising a first hardware module; combining the entered user ID with a password entered by the user; mapping the combined user ID and the password to a system ID authenticating the user by a one-way encryption function; transferring said system ID from the login area to a protected area, comprising a second hardware module, by using an access identifier; authorizing the user to obtain access to protected data in the protected area by the access identifier, wherein in addition to the system ID the user ID entered by the user is transferred in plain text in the access identifier, wherein all authorized access to protected data is logged together with the transferred user ID in an access log, and wherein access to protected data is authorized by comparing the system ID transferred with the access identifier with access entitlements for protected data in a database, wherein each access entitlement is stored in the database and comprises at least a system ID and a reference to data protected by the access entitlement.