Proxy Account System for Cross-Platform Batch Task Execution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current systems lack the ability to restrict user access to specific subsystems within a computer system and cannot execute batch mode tasks across multiple platforms using a single proxy account, as they require separate user accounts for different operating systems.
Innovation Solution
A method that utilizes multiple proxy accounts with credentials to authorize access to computer resources, allowing system administrators to restrict access on a user-by-user basis and enable the execution of batch tasks across multiple software subsystems by impersonating authorized users, even when they are offline.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a single proxy account is used for batch mode tasks, then all users have equal access to computer resources, but system administrators cannot restrict user access to specific subsystems
Solution Approach 1:
The patent segments the single proxy account into multiple proxy accounts, each associated with specific credentials and authorized for specific subsystems. This allows the system administrator to grant different users access to different subsystems based on their needs, resolving the contradiction between ease of operation and adaptability.
Solution Approach 2:
The patent implements local quality by assigning different credential sets to different proxy accounts, where each proxy account has specific authorization for specific subsystems. This enables fine-grained control over which users can access which subsystems, maintaining ease of operation while improving adaptability.
2Adaptability or versatility
If separate user accounts are required for different operating systems, then access control is precise, but batch tasks cannot execute across multiple platforms using a single account
Solution Approach 1:
The patent creates a universal proxy account system where a single user can be associated with multiple proxy accounts, each having credentials for different operating systems. This allows batch tasks to execute across multiple platforms without requiring separate user accounts for each OS, resolving the contradiction between adaptability and device complexity.
Solution Approach 2:
The patent introduces proxy accounts as intermediaries between users and the actual system accounts. The proxy account system manages the complexity of multiple credentials and platform-specific accounts, allowing users to execute tasks across multiple platforms without directly managing the complexity of separate accounts for each operating system.
3Productivity
If users must be online to execute batch tasks, then security is maintained, but task execution flexibility is reduced
Solution Approach 1:
The patent implements preliminary action by pre-configuring proxy accounts with credentials and authorizations before users need to execute batch tasks. The system stores credential information and proxy associations in advance, allowing users to submit batch tasks for later execution even when offline, while maintaining security through the pre-established authorization framework.
Data Source
AI summary
A method of granting permission to use computer software resources when the user may be offline is accomplished through the use of proxy accounts. Each proxy account encapsulates a single set of user credentials. A set of user credentials contains at least a user name and a secret identifier, such as a password. These credentials are used by a scheduler function as an agent for the user to utilize computer resources to run jobs or tasks on behalf of the user. An embodiment of the invention allows for many different proxy account objects each having one set of credentials. The credentials are used at runtime to impersonate the user and allow a job to run. The job may involve multiple software subsystems. The architecture allows multiple proxy accounts to be created which allows system administrators flexibility in assigning different permissions to different users across multiple software environments.