# US 11,308,490 B2 · Security system and method that allows users to securely setup and maintain system security for all business systems > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,308,490 B2 - Document ID: US11308490B2 - Status: Granted - Kind: B2 - Application number: 12/845,086 - Filed: 2010-07-28 - Published: 2012-02-02 - Granted: 2022-04-19 - Earliest claimed: 2010-07-28 - Assignees: Cox Communications, Inc. - Applicants: Brenda B. Little; Kirk H. Warren - Inventors: Brenda B. Little; Kirk H. Warren - Web page: https://patentgrep.com/patent/US11308490B2 ## CPC - G06Q 20/40: Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists - G06F 21/604: {Tools and structures for managing or administering access control systems} - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A system, method and computer-readable medium for providing comprehensive security to business systems by distributing the security for accessing the business systems across databases at a plurality of locations. The distributed security simplifies security maintenance and is used to control all aspects of a business. The generation of bills, pings converter boxes, schedules pay per view, etc. are handled by the distributed security. ## Claims ### Claim 1 A method for securing business systems accessed by a plurality of users over a plurality of locations, comprising: providing, by a computer, a user interface of a distributed security platform on a display device for entry of data by a user; receiving a selection, via the user interface, of a plurality of locations within a network of a business data system; receiving data entered by the user, via the user interface, for authenticating and authorizing the user to access and control databases distributed over the selected plurality of locations; providing, by a computer, security across the databases using the distributed security platform by processing the received entered data to determine rights related to the user associated with the entered data; upon determining the rights related to the user associated with the entered data, authorizing and providing the user access to and control of the databases according to the determined rights by: controlling communication according to the determined rights, by a computer, using an Internet Protocol, directly between the databases distributed over the selected plurality of locations using distributed data management (DDM) files on the databases; and synchronizing the DDM files to logically interrelate the databases, thereby maintaining a complete and single version of data in each database via communication using the Internet Protocol, such that each database includes a single version of the data. ### Claim 2 (depends on 1) The method of claim 1, further comprising downloading, using an active directory process, active directory names from each of the plurality of locations to select when new users needing access are setup. ### Claim 3 (depends on 2) The method of claim 2, further comprising assigning users to a new location without waiting for the active directory process to run when users have moved to the new location on the active directory user file. ### Claim 4 (depends on 2) The method of claim 2, further comprising converting active directory names using a global process across the plurality of databases in the plurality of locations. ### Claim 5 (depends on 1) The method of claim 1, wherein providing security across the databases distributed over the selected plurality of locations using a distributed security platform further comprises providing a password reset option to allow security personnel to reset expired or disabled profiles for users. ### Claim 6 (depends on 1) The method of claim 1, wherein providing security across the databases distributed over the selected plurality of locations using a distributed security platform further comprises presenting a security interface for enabling a user to create and manage profiles. ### Claim 7 (depends on 1) The method of claim 1, wherein providing security across the databases distributed over the selected plurality of locations using a distributed security platform further comprises presenting a first interactive user display to a user for creating a multiple location user profile to allow the user to access multiple locations. ### Claim 8 (depends on 1) The method of claim 1, wherein providing security across the databases distributed over the selected plurality of locations using a distributed security platform further comprises presenting a second interactive user display for adding comments to a profile. ### Claim 9 (depends on 1) The method of claim 1, wherein providing security across the databases distributed over the selected plurality of locations using a distributed security platform further comprises presenting a third interactive user display for showing profiles assigned to a particular group. ### Claim 10 (depends on 1) The method of claim 1, wherein providing security across the databases distributed over the selected plurality of locations using a distributed security platform further comprises presenting a fourth interactive user display for performing at least one of setting up user functions, selecting locations, interfacing with a workforce management module, performing maintenance operations, selecting menu options, and selecting filters for listing job control numbers. ### Claim 11 (depends on 1) The method of claim 1, wherein providing security across the databases distributed over the selected plurality of locations using a distributed security platform further comprises presenting a fifth interactive user display for defining authorization rights for single location users and multiple location users at each site. ### Claim 12 (depends on 1) The method of claim 1, wherein providing security across the databases distributed over the selected plurality of locations using a distributed security platform further comprises presenting a sixth interactive user display for manipulating data associated with at least one parameter chosen from the group consisting of locations, profiles, users, group profiles, menus, menu options, functions, and authorization options. ### Claim 13 (depends on 1) The method of claim 1, wherein providing security across the databases distributed over the selected plurality of locations using a distributed security platform further comprises presenting a seventh interactive user display for adding or deleting parameters. ### Claim 14 (depends on 13) The method of claim 13, wherein adding or deleting parameters is for a single parameter or a plurality of parameters. ### Claim 15 A non-transitory computer-readable storage device having stored thereon computer-executable instructions for implementing a system for securing business systems accessed by a plurality of users over a plurality of locations, the computer-executable instructions, when executed by a computer, cause the computer to: provide a user interface of a distributed security system on a display device for entry of data by a user; receive a selection, via the user interface, of a plurality of locations within a network of a business data system; receive data entered by the user, via the user interface, for authenticating and authorizing the user to access and control databases distributed over the selected plurality of locations; provide, by a computer, security access across the databases using the distributed security platform by processing the received entered data to determine rights related to the user associated with the entered data; upon determining the rights related to the user associated with the entered data, authorizing and providing the user access to and control of the databases according to the determined rights by: controlling communication according to the determined rights, using an Internet Protocol, directly between the databases distributed over the selected plurality of locations using distributed data management (DDM) files on the; and synchronizing the DDM files to logically interrelate the databases, thereby maintaining a complete and single version of data in each database, via communication using the Internet Protocol, such that each database includes a single version of the data. ### Claim 16 (depends on 15) The non-transitory computer-readable storage device of claim 15, the computer is further caused to download, using an active directory process, active directory names from each of the plurality of locations to select when new users needing access are setup. ### Claim 17 (depends on 16) The non-transitory computer-readable storage device of claim 16, the computer is further caused to assign users to a new location without waiting for the active directory process to run when users have moved to the new location on the active directory user file. ### Claim 18 (depends on 16) The non-transitory computer-readable storage device of claim 16, the computer is further caused to convert active directory names using a global process across the plurality of databases in the plurality of locations. ### Claim 19 (depends on 15) The non-transitory computer-readable storage device of claim 15, wherein providing security across the databases distributed over the selected plurality of locations using a distributed security platform further comprises providing a password reset option to allow security personnel to reset expired or disabled profiles for users. ### Claim 20 (depends on 15) The non-transitory computer-readable storage device of claim 15, wherein providing security across the databases distributed over the selected plurality of locations using a distributed security platform further comprises presenting a security interface for enabling a user to create and manage profiles. ### Claim 21 (depends on 15) The non-transitory computer-readable storage device of claim 15, wherein providing security across the databases distributed over the selected plurality of locations using a distributed security platform further comprises presenting a first interactive user display to a user for creating a multiple location user profile to allow the user to access multiple locations. ### Claim 22 (depends on 15) The non-transitory computer-readable storage device of claim 15, wherein providing security across the databases distributed over the selected plurality of locations using a distributed security platform further comprises presenting a second interactive user display for adding comments to a profile. ### Claim 23 (depends on 15) The non-transitory computer-readable storage device of claim 15, wherein providing security across the databases distributed over the selected plurality of locations using a distributed security platform further comprises presenting a third interactive user display for showing profiles assigned to a particular group. ### Claim 24 (depends on 15) The non-transitory computer-readable storage device of claim 15, wherein providing security across the databases distributed over the selected plurality of locations using a distributed security platform further comprises presenting a fourth interactive user display for performing at least one of setting up user functions, selecting locations, interfacing with a workforce management module, performing maintenance operations, selecting menu options, and selecting filters for listing job control numbers. ### Claim 25 (depends on 15) The non-transitory computer-readable storage device of claim 15, wherein providing security across the databases distributed over the selected plurality of locations using a distributed security platform further comprises presenting a fifth interactive user display for defining authorization rights for single location users and multiple location users at each site. ### Claim 26 (depends on 15) The non-transitory computer-readable storage device of claim 15, wherein providing security across the databases distributed over the selected plurality of locations using a distributed security platform further comprises presenting a sixth interactive user display for manipulating data associated with at least one parameter chosen from the group consisting of locations, profiles, users, group profiles, menus, menu options, functions, and authorization options. ### Claim 27 (depends on 15) The non-transitory computer-readable storage device of claim 15, wherein providing security across the databases distributed over the selected plurality of locations using a distributed security platform further comprises presenting a seventh interactive user display for adding or deleting parameters. ### Claim 28 (depends on 27) The non-transitory computer-readable storage device of claim 27, wherein adding or deleting parameters is for a single parameter or a plurality of parameters. ### Claim 29 A distributed security system, comprising: a memory storing computer-executable instructions for implementing the distributed security system; and a processor, coupled to the memory, the processor executing the computer-executable instructions for providing a user interface of a distributed security platform on a display device for entry of data by a user, for receiving a selection, via the user interface, of a plurality of locations within a network of a business data system, for receiving data entered by the user for authenticating and authorizing the user to access and control databases distributed over the selected plurality of locations, for providing security across the databases using the distributed security platform by processing the received entered data to determine rights related to the user associated with the entered data, upon determining the rights related to the user associated with the entered data, authorizing and providing the user access to and control of the databases according to the determined rights by controlling communication according to the determined rights directly between the databases distributed over the selected plurality of locations using an Internet Protocol and distributed data management (DDM) files on the plurality of databases, and synchronizing the DDM files to logically interrelate the databases including the centralized database, thereby maintaining a complete and single version of data in each database, such that each database includes a single version of the data. ### Claim 30 (depends on 29) The system of claim 29, wherein the processor implements an active directory process to download active directory names from each of the plurality of locations to select when new users needing access are setup. ### Claim 31 (depends on 30) The system of claim 30, wherein the processor assigns users to a new location without waiting for the active directory process to run when users have moved to the new location on the active directory user file. ### Claim 32 (depends on 31) The system of claim 31, wherein the processor converts active directory names using a global process across the plurality of databases in the plurality of locations. ### Claim 33 (depends on 29) The system of claim 29, wherein the processor provides a password reset option to allow security personnel to reset expired or disabled profiles for users. ### Claim 34 (depends on 29) The system of claim 29, wherein the processor presents a security interface for enabling a user to create and manage profiles. ### Claim 35 (depends on 29) The system of claim 29, wherein the processor causes a user interface to be displayed allowing a user to create a multiple location user profile to allow the user to access multiple locations. ### Claim 36 (depends on 29) The system of claim 29, wherein the processor causes a user interface to be displayed allowing a user to add comments to a profile. ### Claim 37 (depends on 29) The system of claim 29, wherein the processor causes a user interface to be displayed allowing a user to view profiles assigned to a particular group. ### Claim 38 (depends on 29) The system of claim 29, wherein the processor causes a user interface to be displayed allowing a user to perform at least one of setting up user functions, selecting locations, interfacing with a workforce management module, performing maintenance operations, selecting menu options, and selecting filters for listing job control numbers. ### Claim 39 (depends on 29) The system of claim 29, wherein the processor causes a user interface to be displayed allowing a user to define authorization rights for single location users and multiple location users at each site. ### Claim 40 (depends on 29) The system of claim 29, wherein the processor causes a user interface to be displayed allowing a user to manipulate data associated with at least one parameter chosen from the group consisting of locations, profiles, users, group profiles, menus, menu options, functions, and authorization options. ### Claim 41 (depends on 29) The system of claim 29, wherein the processor causes a user interface to be displayed allowing a user to add or delete parameters. ### Claim 42 (depends on 41) The system of claim 41, wherein the processor causes a user interface to be displayed allowing a user to add or delete a single parameter or a plurality of parameters.