User access to a registry of business entity definitions
AssigneeInternational Business Machines Corporation
InventorJohn Colgrave
Life of this patent
Estimating the term…
Abstract
The present invention provides an apparatus, method and computer program product for a registry, such as a UDDI registry, to restrict access to business entity definitions contained in the registry according to permission details associated with the business service definition. A business entity definition may comprise a plurality of information elements. Permission details, which define users or groups of users with permission to access the information element, are then associated with one or more of these information elements. When a user request is received to access a business entity definition access is restricted to only those information elements for which the user has the required permission.
Claims18
A system for controlling user access to a registry of business entity definitions, the system comprising:
- at least one processor;
- a computer readable memory communicatively coupled to said processor having said business entity definitions stored thereon, and
- a network connector to interface the system with a computer network;
- wherein said system is programmed to:
- maintain the registry of business entity definitions, wherein each business entity definition comprises a description of a corresponding business entity, the description of each corresponding business entity comprising a description of at least one business service provided by that business entity, each of said business entity definitions and business service descriptions having different and separate permission details associated therewith;
- receive a request from a user, via the network connector, the request comprising search criteria and requesting to access a corresponding business entity definition in said registry, said business entity definition comprising a plurality of information elements;
- obtain the identity of the user from data associated with the request;
- determine a list of business entity definitions that satisfy the search criteria and whether the user has permission to access that business entity definition and any business service description of that business entity that matched the search criteria;
- in response to said request, filter search results comprising removing from the search results at least one business entity for which it is determined that the user does not have permission for either the corresponding business entity definition or business service description that matched the search criteria;
- and
- return, via the network connector, the filtered search results.
A server computer hosting and controlling user access to an electronic registry of business entity definitions available via a computer network in response to user requests to access business entity definitions and individual information elements therein, the server comprising a processor, volatile and non-volatile electronic memory and a network interface, wherein the server is programmed for:
- maintaining the registry of business entity definitions, wherein each business entity definition comprises a description of a corresponding business entity, the description of each corresponding business entity comprising a description of at least one business service provided by that business entity, each of said business entity definitions and business service descriptions having different and separate permission details associated therewith;
- receiving a request from a user via the network connector, the request comprising search criteria and requesting to access a corresponding business entity definition in said registry, said business entity definition comprising a plurality of information elements;
- obtaining the identity of the user from data associated with the request;
- determining a list of business entity definitions that satisfy the search criteria and whether the user has permission to access that business entity definition and any business service description of that business entity that matched the search criteria;
- in response to said request, filter search results comprising removing from the search results at least one business entity for which it is determined that the user does not have permission for either the corresponding business entity definition or business service description that matched the search criteria;
- and
- returning, via the network connector, the filtered search results.
Dependencies are inferred from the claim text.