Patent ID: 8104076

Claim:
A method for controlling a user's access rights to protected and access-required application in a computer system, comprising: (a) registering a user developed tool housing the protected and access-required application with the computer system to activate protection on the user developed tool and the protected and access-required application housed within the user developed tool via a software program; (b) creating a randomly-generated and encrypted password in a configured mechanism for the protected and access-required application, and storing the randomly-generated and encrypted password in a break-glass database and a back-end database corresponding to the registered user developed tool by an application access control server; (c) entering user's identification, a single sign-on password, and identification of the protected and access-required application in a user developed tool launcher, to login with a centralized application access authentication facility; (d) checking whether the user is authorized to access the protected and access-required application by the application access control server; (e) retrieving the randomly-generated and encrypted password from the back-end database and decrypting the randomly-generated and encrypted password to use the decrypted randomly-generated password to launch the protected and access-required application by the application access control server if confirmed that the user is authorized to access the protected and access-required application; and (f) retrieving clear-text password for a particular application in the user developed tool by an authorized user, and launching the protected and access-required application, via the software program, when an emergency occurs so that the computer system is unable to authenticate user credentials.