Privilege restriction enforcement in a distributed system
View Patent ↗Remote administrative privileges in a distributed system are disabled by default. To administer a remote system, express action is taken to elevate a user status to obtain remote administrative privileges. When local and remote systems communicate, information pertaining to the status of the logged on user is included in the communications. If the user wishes to legitimately administer a remote system, the user provides an explicit request. The request is processed. If the user is configured as an administrator of the remote system and the request contains an indication that the user's administrative status has been elevated, an authorization token is generated. The authorization token is utilized by the remote system to allow the user to administer the remote system.
1. A processor-implemented method for enforcing an administrative privilege in a distributed system, said method comprising:
receiving, from an entity previously having at least one administrative privilege, an administrative request to administer a remote system in the distributed system in accordance with the at least one administrative privilege;
determining, via the processor, if the at least one administrative privilege is authorized;
if the at least one administrative privilege is authorized:
generating an authentication token indicative of the granted administrative privilege, the authentication token being utilizable by the remote system to permit administration of the remote system; and
permitting administration of the remote system in accordance with the granted administrative privilege.
2. A method in accordance with claim 1 , further comprising automatically granting no remote administrative privileges when logging onto the distributed system.
3. A method in accordance with claim 1 , further comprising taking an express action to administer the remote system.
4. A method in accordance with claim 1 , further comprising receiving the administrative request via one of a secure channel and a non-secure channel.
5. A method in accordance with claim 1 , wherein the administrative request comprises a restriction to the at least one administrative privilege.
6. A computer-readable storage medium having computer-executable instructions stored thereon for enforcing an administrative privilege in a distributed system by:
receiving, from an entity previously having at least one administrative privilege, an authentication payload comprising the at least one administrative privilege associated with a user and a remote system in the distributed system;
determining if the at least one administrative privilege is authorized; and
if the at least one administrative privilege is authorized, permitting administration of the remote system in accordance with the authorized at least one administrative privilege.
7. A computer-readable storage medium in accordance with claim 6 , wherein a remote administrative privilege is not automatically granted upon logging on to the distributed system.
8. A computer-readable storage medium in accordance with claim 6 , the computer-readable medium having further executable instructions for receiving the authentication payload via one of a secure channel and a non-secure channel.
9. A computer-readable storage medium in accordance with claim 6 , the computer-readable medium having further executable instructions for generating an authentication token indicative of the authorized administrative privilege, wherein the authentication token is utilizable by the remote system to permit administration of the remote system.
10. A computer-readable storage medium in accordance with claim 6 , the computer-readable medium having further executable instructions for permitting administration of the remote system in accordance with the authorized at least one administrative privilege.
11. A computer readable storage medium in accordance with claim 6 , wherein the authentication payload comprises a restriction to the at least one administrative privilege.
12. A system for enforcing an administrative privilege, said system comprising:
an input/output portion for:
receiving, from an entity previously having at least one administrative privilege, an administrative request to administer the system in accordance with the at least one administrative privilege; and
a processor portion for:
determining if the at least one administrative privilege is authorized; and
if the at least one administrative privilege is authorized, permitting administration of the system in accordance with the authorized at least one administrative privilege, wherein the system comprises a remote system in a distributed system, and an administrative privilege for administering the remote system is not automatically granted upon logging on to another system of the distributed system.
13. A system in accordance with claim 12 , further comprising one of a secure channel and a non-secure channel for receiving the administrative request.
14. A system in accordance with claim 12 , further comprising a token generator for generating an authentication token indicative of the authorized at least one administrative privilege, wherein the authentication token is utilizable by the system to permit administration of the system.
15. A system in accordance with claim 12 , said processing portion further for permitting administration of the system in accordance with the authorized at least one administrative privilege.
16. A system in accordance with claim 12 , wherein the administrative request comprises a restriction to the at least one administrative privilege.