International Business Machines Corporation
Multi-stage authorization

Abstract:

A task identification, an operator key, and a supervisor key are generated. The task identification is associated with a system administration task request and can include information from the request to initiate the system administration task request such as the system name. The operator key and the supervisor key are encrypted. Via a secure network, the task identification and the operator key are sent to an operator computing device and the supervisor key is sent to a supervisor computing device. In response to determining that the task identification is valid, the operator key returned from the operator computing device is decrypted. In response to determining that the decrypted operator key is valid, the encrypted supervisor key returned from the supervisor computing device is decrypted. In response to determining that the decrypted supervisor key is valid, an indication of a successful validation of the system administration task is provided.