Patent ID: 8261095

Claim:
A computer-implemented method for accessing a resource in a computer system, comprising an operating system, the method comprising: receiving a request to access the resource; initializing at least one derived user account based on at least one original user account and a set of rules at least in part by: generating the at least one derived user account using user account creation mechanisms of the operating system; and populating the at least one derived user account based on the original user account and the set of rules at least in part by: setting a value for at least one state in the at least one derived user account as the closer of two end values of a range if the value of a corresponding state of the at least one original user account is outside the range; and setting the value for the at least one state in the at least one derived user account as the value of the corresponding state of the at least one original user account if the value of the corresponding state of the original user account is within the range; and accessing the resource based on the at least one derived user account.