Patent ID: 7562226

Claim:
A system for providing permission-based access to an existing logon session, comprising: a storage location holding a plurality of sets of interactive user credentials, each set of credentials associated with a different interactive user and indicating at least one permission level for at least one application and an access level for a server-hosted domain; the client executing an active operating system logon session for a shared account, the active operating system logon session established with a default user profile not associated with a particular interactive user; an additional authentication application executing on the client to authenticate a first local interactive user independently from the active operating logon session; a server in connection with the client, the server initiating a server-hosted session for the first local interactive user of the client responsive to the authentication of the first local interactive user by the additional authentication application, the first local interactive user accessing the client via the default user profile; and a credential delivery application communicating with the server and the client, the credential delivery application receiving, from the client, an identifier identifying the first local interactive user and using the identifier to retrieve a first set of credentials for the first local interactive user from the storage location, the first set of credentials delivered by the credential delivery application to the server, the first set of credentials used to map the first local interactive user to the server-hosted session for the first local interactive user.