Arrangements for interfacing with a user access manager
View Patent ↗Arrangements which permit the employment of dedicated user-access management architecture with more than text-based access. Particularly contemplated herein are arrangements for accepting user identifiers that are then communicated to an intermediate user-delineating architecture (i.e., architecture configured for permitting access to encrypted data or sections of a computer on a user-specific basis) in a manner to permit the user-delineating architecture to perform its own task of unlocking data or sections of a computer.
1. A method comprising:
receiving at a user input device a user identification input at a data processing system comprising at least one hardware processor, the user identification input being in a form different from a particular form employed by a user-delineating architecture residing on said data processing system for managing user-based access;
responsive to locating at least one user associated with the user identification input, releasing an initial credential derived from the user identification input received at the user input device;
converting, by a conversion device separate from the user-delineating architecture, the initial credential into a final credential, the final credential being in the particular form employed by said user-delineating architecture; and
providing the final credential to said user-delineated architecture;
wherein said user-delineating architecture allows access to at least one component of said data processing system responsive to accepting the final credential.
2. The method according to claim 1 , wherein said releasing comprises releasing a user-specific decryption key.
3. The method according to claim 1 , wherein said converting comprises performing a lookup, based on the initial credential, to yield the final credential.
4. The method according to claim 1 , wherein the final credential comprises a password in the particular form employed by said user-delineated architecture.
5. The method according to claim 1 , wherein said receiving comprises receiving biometric user identification input.
6. The method according to claim 5 , wherein said receiving comprises receiving user fingerprint input.
7. The method according to claim 1 , wherein said receiving comprises receiving user password input for a remote login.
8. The method according to claim 7 , wherein said receiving comprises receiving local password input, the local password input comprising a user-related credential released from a remote server.
9. The method according to claim 1 , wherein said accepting the final credential by said user-delineated architecture prompts said user-delineated architecture to perform an access-granting task.
10. The method according to claim 9 , wherein said accepting the final credential by said user-delineated architecture triggers user-based decryption of at least one system portion by said user-delineated architecture.
11. The method according to claim 10 , wherein said user-delineated architecture manages user-based access at a basic input/output system (BIOS) level.
12. An apparatus comprising:
a main memory;
a basic input/output system (BIOS) operatively coupled to said main memory, the BIOS acting to receive user identification input received at a user input device, the user identification input being in a form different from a particular form employed by a user-delineating architecture residing on said apparatus;
responsive to locating at least one user associated with the user identification input, said BIOS acting to release an initial credential derived from the user identification input received at the user input device;
a conversion vault device separate from the user-delineating architecture which converts the initial credential into a final credential, the final credential being in the particular form employed by the user-delineating architecture ; and
said user-delineating architecture configured to receive said final credential;
wherein said user-delineating architecture allows access to at least one component of said apparatus responsive to accepting the final credential.
13. The apparatus according to claim 12 , wherein said BIOS acts to release a user-specific decryption key.
14. The apparatus according to claim 12 , wherein said conversion vault device acts to perform a lookup, based on the initial credential, to yield the final credential.
15. The apparatus according to claim 12 , wherein the final credential comprises a password recognizable by said user-delineated architecture.
16. The apparatus according to claim 12 , wherein said BIOS acts to receive input related to a user fingerprint.
17. The apparatus according to claim 12 , wherein said BIOS acts to receive user password input for a remote login.
18. The apparatus according to claim 17 , wherein said BIOS acts to receive local password input, the local password input comprising a user-related credential released from a remote server.
19. The apparatus according to claim 12 , wherein said user-delineated architecture performs an access-granting task responsive to said accepting the final credential by said user-delineated architecture.
20. The apparatus according to claim 19 , wherein said user-delineated architecture triggers user-based decryption of at least one system portion by said user-delineated architecture responsive to said accepting the final credential by said user-delineated architecture.
21. The apparatus according to claim 20 , wherein said user delineated architecture manages user-based access at a BIOS level.
22. A program storage device readable by machine, tangibly embodying a program of instructions executable by the machine to perform a method comprising:
receiving at a user input device a user identification input, the user identification input being in a form different from a particular form employed by a user-delineating architecture residing on the machine;
responsive to locating at least one user associated with the user identification input, releasing an initial credential derived from the user identification input received at the user input device;
converting, by a conversion device separate from the user-delineating architecture, the initial credential into a final credential, the final credential being in the particular form employed by said user-delineating architecture ; and
providing the final credential to said user-delineated architecture;
wherein said user-delineating architecture allows access to at least one component of the machine responsive to accepting the final credential.