CONTROLLING ACCESS RIGHTS IN A NETWORKED SYSTEM WITH DATA PROCESSING

摘要

The invention relates to a method for the computer-aided administration of authorizations or access rights in a networked system with data processing. The method involves subdivision or grouping of objects (O1,..., Ot) in the system such as files, devices, application programs etc. into object groups. Membership of an object group determines whether an access right to an object (O1,..., Ot) is granted to a user (N1,..., N,) or refused. The object groups are formed with the aid of rules which relate to at least one property of the objects (O1,..., Ot), particularly a property that varies over time. Assignment of the objects (O1,..., Ot) to an object group is continuously updated, so that it is only possible to access objects (O1,..., Ot) with specified properties. As a result, administration of the access rights is more reliable and also easier, as hierarchical organizational structures are not required. The method is particularly suitable for security-critical systems such as supply systems for district heat, natural gas, power or water, or process engineering machinery and equipment.