Abstract:
Within the scope of the method for management and/or administration of access authorizations in a network, especially of access authorizations for internet and/or network main portals, the user administration is designed as a standardized, web protected and a decentralized process. For each main portal, a separate application is required and it is made possible for the user to seek possible internet and/or network main portals.

Description:
This application claims priority from German Application Serial No. 103 45 323.7 filed Sep 30, 2003. 
   FIELD OF THE INVENTION 
   This invention relates to a method for management and administration of access authorization in a network. 
   BACKGROUND OF THE INVENTION 
   U.S. Pat. No. 6,381,579 B1 describes a system and method by means of a so-called “web-browser”, to make it possible for users to access internet sites with certainty; the users then have a tailored menu for use available. This method was developed in order to ensure the handling of online businesses such as between contractors and customers, as can be the case in a large enterprise. Different users have different access rights which in real time can be changed online. 
   In enterprises and large organizations effective user management is necessary, especially with relation to access rights to sensitive data. Besides, great flexibility is required in order to take fluctuations in personnel composition and fields of duty into consideration. 
   The problem on which this invention is based is to provide for management and/or administration of access authorizations in a network; a method which makes simple and effective management and/or administration possible. 
   SUMMARY OF THE INVENTION 
   It is accordingly proposed to design the user administration as a standardized, preferably web supported and decentralized process. An application of the user is required which is preferably designed to be interactive. Besides, within the scope of an advantageous alternative of the inventive method, it is proposed that for an access to internet and/or network main portal, one application is respectively required thus making possible for the users to seek possible internet and/or network main portals. 
   It is possible, according to the invention, to change personal data or data that is specific to the user after an application has been made at an internet and/or network main portal. This is advantageously done by the user, the positions affected by the change being informed. 
   According to the invention, a cancellation of an access authorization is further provided which can be initiated by the user, his employer and/or the personnel section. 

   
     BRIEF DESCRIPTION OF THE DRAWINGS 
     The invention will now be described, by way of example, with reference to the accompanying drawings in which: 
       FIG. 1  is a diagram illustrating the inventive application process; 
       FIG. 2  is a diagram illustrating the change of personal data of the user according to the inventive method; and 
       FIG. 3  is one other diagram showing the cancellation of an access authorization. 
   

   DETAILED DESCRIPTION OF THE INVENTION 
   It is, therefore, proposed according to the invention that for access to internet and/or network main portals, a respective application by the user is required, it being made possible to the user to seek possible internet and/or network main portals. 
   This is illustrated in  FIG. 1 . Here the customer or user  12  generates an access request  10 , for example, to the firm&#39;s internal network (intranet) which contains data of the user (for example, name PC-ID, etc.) and data of the main portal for which access is applied. This step is labeled in the Figure with the reference numeral  1 . 
   After dispatch of the request (access request  10 ), a notice is sent to the employer  14  and to the user or customer  12 . 
   Subsequently the access request  10  is either dismissed or acknowledged; in case of dismissal, the customer or user  12  is preferably informed by a dismissal notice (reference numeral  4 ). It is inventively provided that for the case of a “sensitive” and/or new internet and/or network main portal  18 , the access request  10  is additionally checked (optional) by another control authority  22  so that a release of the dismissal notice is effected by the control authority  22 , this is labeled reference numeral  3  in  FIG. 1 . 
   For the case of acceptance or acknowledgment of the access request  10 , notice  5   a  thereof is sent to the administrator  16  and an acceptance notice  8   a  is generated by the administrator  16  which serves to inform the user or customer  12  that the user&#39;s information has been registered at the main portal  18 ; this operation can also be advantageously further automated by means of a structured notice (reference numeral  5   b ) directly at the main portal  18 . The user&#39;s pieces of information are then registered at the main portal  18 , as indicated by reference numeral  6 , and the user&#39;s data specific to the main portal  18 , such as identification and password, are received by the main portal  18  or main portal operator  18   a . In addition, the registered request is acknowledged in the administration tool  20  by the administrator  16 , as indicate by reference numeral  7 . 
   It is inventively provided that the user&#39;s data specific to the main portal  18  is passed to the user or customer  12  either via the administrator  16  or directly by the main portal operator  18   a  as indicated by reference numeral  8   b . 
   In  FIG. 2  is diagrammatically illustrated the inventive procedure to edit personal data. The change request(s)  24  are here initiated by the user  12 , preferably via the web-browser or any other adequate tool (reference numeral  1 ) and, within the scope of a first alternative, the changes specific to the main portal  18  are relayed, via the administrator  16 , (reference numerals,  2   a  and  3   c ) to the main portal  18  wherein the changes are registered. One other specially advantageous alternative provides that the information about changes specific to the main portal  18 , for example, about a structured notice, are communicated directly to the user or customer  12  or to the main portal  18 . After effecting a change, the user or customer  12  can directly receive a corresponding acknowledgment  4   c . 
   To cancel the access authorization (see  FIG. 3 ), it is proposed that the user enters a corresponding cancellation petition (reference numeral  1   a ), the employer  14  receiving a control mail (reference numeral  1   b ), and the cancellation request can be acknowledged or dismissed by the employer  14 ; this step corresponds to the reference numeral  1   c  in  FIG. 3 . 
   The information or cancellation request is then passed, via the administrator  16 , to the main portal  18 , as indicated by reference numerals  2   a  and  3   c  or is advantageously communicated directly to the main portal  18 , for example, via structured notice (step  2   b ) where the access is canceled or deactivated. An acknowledgment  7  of the cancellation of access is sent to the administrator tool  20 ; the user  12  is correspondingly informed, for example, via a notice  5   d  in  FIG. 3 . Alternatively or additionally, the user  12  can be directly informed by the main portal  18 , as illustrated by the arrow provided with the reference numeral  6   d . 
   One advantageous development provides that an access can be canceled or deactivated (arrow  7   d ) by personnel department  26  via an adequate interface with the administrator tool  20 . 
   The method introduced here for management and/or administration of access authorizations in a network, makes a transparent, efficient and decentralized means available which offers clearances to the co-workers and to the enterprise of extensive safety and data protection.