Abstract: The invention concerns a method and a data processing system to protect an electronic data object from unauthorized access. Via a method, a) in a first step, an electronic data object identifier is generated dependent on the content of the data object, b) in a further step, an access right is determined dependent on the data object identifier, and c) in a last step, an access to the data object is allowed dependent of the access right. The data processing system comprises a data processing device and an access control module. Via the access control module, an electronic data object identifier can be generated dependent on the content of a data object, and an access right can be determined dependent on the data object identifier. The access right can comprises standard rights such as “Read” or “Write” and an “Execute” right to execute specific functionalities.

Abstract: The invention concerns a method and a data processing system to protect an electronic data object from unauthorized access. Via a method, a) in a first step, an electronic data object identifier is generated dependent on the content of the data object, b) in a further step, an access right is determined dependent on the data object identifier, and c) in a last step, an access to the data object is allowed dependent of the access right. The data processing system comprises a data processing device and an access control module. Via the access control module, an electronic data object identifier can be generated dependent on the content of a data object, and an access right can be determined dependent on the data object identifier. The access right can comprises standard rights such as “Read” or “Write” and an “Execute” right to execute specific functionalities.

Abstract: The invention concerns a procedure for logging a user into a data processing device with an operating system and a data processing program. In a first step, data for authenticating a user is entered, in a second step an identity and access rights are determined based upon the authentication data and in a third step access is provided for the application program and/or for sensitive data based on the defined access rights. In accordance with the invention, the steps are independent from starting the operating system or the data processing applications. In an especially advantageous version of the invention, a user switch can be performed by logging a user out and logging another user in while retaining the application context, i.e., user interface and current processing data.