Back to results
US 2013/0276142 A1Published application
Method and system for granting access to secure data
Assigneesalesforce.com, inc.
InventorPrasad Peddada
Life of this patent
Estimating the term…
Abstract
Techniques described herein can be implemented as one or a combination of methods, systems or processor executed code to form embodiments capable of improved protection of data or other computing resources based at least in part upon limiting access to a select number of delegates. Limited access to cloud data based on customer selected or other criterion, reducing the possibility of security exposures and/or improving privacy is provided for.
Claims22
A computer-implemented method for granting access to private customer data, the method comprising:
- receiving via a computing device an electronic format request on behalf of a customer;
- determining a set of potential delegates corresponding to the electronic format request;
- determining attributes corresponding to the set of potential delegates;
- determining at least one authorization filter, the at least one filter including authorization criterion corresponding to the customer;
- determining whether any one of the set of potential delegates can be authorized to access private customer data of the customer by applying the at least one authorization filter to the attributes corresponding to the set of potential delegates to determine a set of authorized delegates, based at least in part on determining a correspondence between at least one of the attributes to at least one of the criterion;
- and
- determining, from the set of authorized delegates, at least one delegate to be assigned to the electronic format request.
4 more elements
A computer-implemented method for granting access to private customer data, the method comprising:
- receiving via a computing device an electronic format request on behalf of a customer;
- determining a set of potential delegates corresponding to the electronic format request;
- determining attributes corresponding to the set of potential delegates;
- determining at least one authorization filter, the at least one filter including authorization criterion corresponding to the customer;
- determining whether any one of the set of potential delegates can be authorized to access private customer data of the customer by applying the at least one authorization filter to the attributes corresponding to the set of potential delegates to determine a set of authorized delegates, based at least in part on determining a correspondence between at least one of the attributes to at least one of the criterion;
- determining, from the set of authorized delegates, at least one delegate to be assigned to the electronic format request;
- issuing an authorization to the at least one delegate to be assigned to the electronic format request, wherein issuing an authorization includes providing authorization for reviewing at least a subset of private data of the customer;
- granting delegate access to private customer data of the customer by providing a link facilitating login as the delegate;
- and
- providing the delegate at least one permission of the customer to enable the delegate to impersonate a user at the customer while tracking the activities of the delegate.
7 more elements
A non-transitory machine readable medium, storing one or more instructions which when executed by one or more processors cause the one or more processors to perform the following:
- receiving via a computing device an electronic format request on behalf of a customer;
- determining a set of potential delegates corresponding to the electronic format request;
- determining attributes corresponding to the set of potential delegates;
- determining at least one authorization filter, the at least one filter including authorization criterion corresponding to the customer;
- determining whether any one of the set of potential delegates can be authorized to access private customer data of the customer by applying the at least one authorization filter to the attributes corresponding to the set of potential delegates to determine a set of authorized delegates, based at least in part on determining a correspondence between at least one of the attributes to at least one of the criterion;
- determining, from the set of authorized delegates, at least one delegate to be assigned to the electronic format request;
- issuing an authorization to the at least one delegate to be assigned to the electronic format request, wherein issuing an authorization includes providing authorization for reviewing at least a subset of private data of the customer;
- granting delegate access to private customer data of the customer by providing a link facilitating login as the delegate;
- and
- providing the delegate at least one permission of the customer to enable the delegate to impersonate a user at the customer while tracking the activities of the delegate.
7 more elements
A computer-implemented method for determining a number of candidates available to meet a criterion of interest, comprising:
- receiving a criterion of interest on behalf of a customer;
- determining a set of potential delegates corresponding to the criterion of interest;
- determining attributes corresponding to the set of potential delegates;
- determining at least one authorization filter, the at least one filter including authorization criterion corresponding to the customer;
- determining whether any one of the set of potential delegates can be authorized to access private customer data of the customer by applying the at least one authorization filter to the attributes corresponding to the set of potential delegates to determine a set of authorized delegates, based at least in part on determining a correspondence between at least one of the attributes to the criterion of interest;
- and
- determining, from the set of authorized delegates, a number of candidates available to meet the criterion of interest.
4 more elements
Dependencies are inferred from the claim text.