Patent ID: 7810164

Claim:
A user authorization management method for, when a program or data for providing an additional function is to be incorporated into a system having a given fundamental function and realized on a computer, managing end users' use authorization for using the program or data, said user authorization management method comprising: a step of storing, into a first storage section provided in the computer, first authentication information to be used for authenticating one or more users having use authorization of the system; a step of, through a log-on check procedure executed by the computer, confirming whether a user trying to log-on is an authentic user or not, based on information entered by the user and the first authentication information stored in said first storage section, and then permitting log-on of the user to the system if the confirmation is affirmative; a step of obtaining the program or data for providing the additional function from a supplier, the program or data being created by the supplier and including second authentication information that authenticates the supplier authorized to use or to edit the program or data, and storing the program or data into a second storage section provided in the computer; a step of, when the logged-on user has requested to use or to edit the program or data, authenticating, through an authentication procedure executed by the computer, whether the logged-on user is a user authorized to use or to edit the program or data, based on the information entered by the logged-on user at said step of confirming and the second authentication information included in the program or data; and a step of, through a control procedure executed by the computer, authorizing the logged-on user to use or to edit the program or data when the logged-on user has been authenticated, through the authentication procedure, but not authorizing the logged-on user to use or to edit the program or data when the logged-on user has not been authenticated.