System, methods, and devices for data storage and processing with identity management
AssigneeBank of Montreal
InventorsIouri MIKHAILOV, Ching Leong WAN
Life of this patent
Estimating the term…
Abstract
Embodiments relate to data storage systems and data processing systems using a data hub, connector grid, and channel services. The systems can extract raw data from a plurality of source systems, and load and store the raw data at a data hub implemented by a non-transient data store. The systems can receive request to generate data for consumption and, in response, transmit generates data sets to channel services. The system can implement event detection and logging. The system can implement policy enforcement and identity management with access controls.
Claims20
A system for identity and access management, comprising at least a processor and a non-transient data memory storage, the data memory storage containing machine-readable instructions for execution by the processor, the machine-readable instructions configured to, when executed by the processor:
- load and store raw data from a plurality of source systems at a data hub implemented by a non-transient data store;
- receive a request for an application and data at the data hub, the request indicating an enterprise credential, the application having application functions;
- map the enterprise credential to an enterprise identity;
- in response to the request, select a set of data from the raw data based on the enterprise identity;
- verify the request and the set of data against one or more access controls linked to the enterprise identity, the access controls indicating data entitlement and permitted application functions;
- transform the selected set of data into an enterprise data set;
- control, at an interface, interactions with the application functions based on the access controls;
- and
- transmit, to the interface, the enterprise data set.
A computer-implemented method for executing by a processor, the method comprising:
- extracting, by the processor, raw data from a plurality of source systems;
- loading and storing the raw data at a data hub implemented by a non-transient data store;
- receiving a request to generate data for consumption, the request indicating an enterprise identity;
- in response to the request, selecting a set of data from the raw data based on a data map, the enterprise identity, and one or more access controls linked to the enterprise identity;
- transforming the selected set of data into an enterprise data set based on the data map and the enterprise identity;
- and
- transmitting the enterprise data set.
Dependencies are inferred from the claim text.