# US 12,112,323 B2 · Security system and method that allows users to securely setup and maintain system security for all business systems > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,112,323 B2 - Document ID: US12112323B2 - Status: Granted - Kind: B2 - Application number: 17/722,761 - Filed: 2022-04-18 - Published: 2022-10-13 - Granted: 2024-10-08 - Earliest claimed: 2010-07-28 - Assignees: Cox Communications, Inc. - Applicants: Cox Communications, Inc. - Inventors: Brenda B. Little; Kirk H. Warren - Web page: https://patentgrep.com/patent/US12112323B2 ## CPC - G06Q 20/40: Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists - G06F 21/604: {Tools and structures for managing or administering access control systems} - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A system, method and computer-readable medium for providing comprehensive security to business systems by distributing the security for accessing the business systems across databases at a plurality of locations. The distributed security simplifies security maintenance and is used to control all aspects of a business. The generation of bills, pings converter boxes, schedules pay per view, etc. are handled by the distributed security. ## Claims ### Claim 1 A method for securing business systems accessed by a plurality of users over a plurality of locations, comprising: receiving a user selection of a plurality of locations within a network of a business data system; receiving data entered by the user for authenticating and authorizing the user to access and control databases distributed over the selected plurality of locations; processing the received entered data to determine rights related to the user associated with the entered data; upon determining the rights related to the user associated with the entered data, authorizing and providing the user access to and control of the databases according to the determined rights by: controlling communication according to the determined rights, by a computer, directly between the databases distributed over the selected plurality of locations using Distributed Data Management (DDM) files on the databases; and synchronizing the DDM files to logically interrelate the databases, thereby maintaining a complete and single version of data in each database via communication, such that each database includes a single version of the data. ### Claim 2 (depends on 1) The method of claim 1, further comprising assigning users to a new location without waiting for an active directory process to run when users have moved to the new location on the active directory user file. ### Claim 3 (depends on 1) The method of claim 1, further comprising creating multiple user profiles to allow the user to access multiple locations. ### Claim 4 (depends on 3) The method of claim 3, further comprising defining authorization rights for single location users and for multiple location users at each location. ### Claim 5 (depends on 3) The method of claim 3, wherein providing security across the databases distributed over the selected plurality of locations further comprises providing a password reset option to allow security personnel to reset expired or disabled profiles for users. ### Claim 6 (depends on 1) The method of claim 1, wherein providing security across the databases distributed over the selected plurality of locations further comprises one or more of setting up user functions, selecting locations, interfacing with a workforce management module, performing maintenance operations, and selecting menu options. ### Claim 7 (depends on 1) The method of claim 1, wherein providing security across the databases distributed over the selected plurality of locations further comprises manipulating, adding, or deleting at least one parameter chosen from a group of parameters associated with locations, profiles, users, group profiles, menus, menu options, functions, and authorization options. ### Claim 8 (depends on 1) The method of claim of claim 1, wherein synchronizing the databases maintains a complete and single version of data in each database despite concurrent accesses to the data. ### Claim 9 A non-transitory computer-readable storage device having stored thereon computer-executable instructions for implementing method for securing business systems accessed by a plurality of users over a plurality of locations, the computer-executable instructions, when executed by a processor, cause the processor to: receive a user selection of a plurality of locations within a network of a business data system; receive data entered by the user for authenticating and authorizing the user to access and control databases distributed over the selected plurality of locations; process the entered data to determine rights related to the user associated with the entered data; upon determining the rights related to the user associated with the entered data, authorize and provide the user access to and control of the databases according to the determined rights by: controlling communication according to the determined rights directly between the databases distributed over the selected plurality of locations using Distributed Data Management (DDM) files on the databases; and synchronizing the DDM files to logically interrelate the databases, thereby maintaining a complete and single version of data in each database via communication, such that each database includes a single version of the data. ### Claim 10 (depends on 9) The non-transitory computer-readable storage device of claim 9, wherein the processor is further caused to assign users to a new location without waiting for an active directory process to run when users have moved to the new location on the active directory user file. ### Claim 11 (depends on 9) The non-transitory computer-readable storage device of claim 9, wherein providing security across the databases distributed over the selected plurality of locations further causes the processor to provide a password reset option to allow security personnel to reset expired or disabled profiles for users. ### Claim 12 (depends on 9) The non-transitory computer-readable storage device of claim 9, wherein providing security across the databases distributed over the selected plurality of locations further causes the processor to set up user functions, select locations, interface with a workforce management module, perform maintenance operations, and select menu options. ### Claim 13 (depends on 9) The non-transitory computer-readable storage device of claim 9, wherein providing security across the databases distributed over the selected plurality of locations further causes the processor to manipulate, add, or delete at least one parameter chosen from a group of parameters associated with locations, profiles, users, group profiles, menus, menu options, functions, and authorization options. ### Claim 14 (depends on 9) The non-transitory computer-readable storage device of claim 9, wherein synchronizing the databases causes the processor to maintain a complete and single version of data in each database despite concurrent accesses to the data. ### Claim 15 A distributed security system, comprising: a memory storing computer-executable instructions for implementing the distributed security system; and a processor, coupled to the memory, the processor executing the computer-executable instructions for: receiving a user selection of a plurality of locations within a network of a business data system; receiving data entered by the user for authenticating and authorizing the user to access and control databases distributed over the selected plurality of locations; providing, by a computer, security across the databases by processing the received entered data to determine rights related to the user associated with the entered data; upon determining the rights related to the user associated with the entered data, authorizing and providing the user access to and control of the databases according to the determined rights by: controlling communication according to the determined rights, by a computer, directly between the databases distributed over the selected plurality of locations using Distributed Data Management (DDM) files on the databases; and synchronizing the DDM files to logically interrelate the databases, thereby maintaining a complete and single version of data in each database via communication, such that each database includes a single version of the data despite concurrent accesses to the data. ### Claim 16 (depends on 15) The system of claim 15, further comprising assigning users to a new location without waiting for an active directory process to run when users have moved to the new location on the active directory user file. ### Claim 17 (depends on 15) The system of claim 15, further comprising creating multiple user profiles to allow the user to access multiple locations. ### Claim 18 (depends on 15) The system of claim 15, further comprising defining authorization rights for single location users and for multiple location users at each location. ### Claim 19 (depends on 15) The system of claim 15, wherein providing security across the databases distributed over the selected plurality of locations further comprises one or more of setting up user functions, selecting locations, interfacing with a workforce management module, performing maintenance operations, and selecting menu options. ### Claim 20 (depends on 15) The system of claim 15, wherein providing security across the databases distributed over the selected plurality of locations further comprises manipulating, adding, or deleting at least one parameter chosen from a group of parameters associated with locations, profiles, users, group profiles, menus, menu options, functions, and authorization options.