Secure access to transaction based information
AssigneeOracle International Corporation
InventorsGregory Sandford, Eric L. Solberg
Life of this patent
Estimating the term…
Abstract
The present invention includes a system and method for securing information and accessing secured information. In accordance with an embodiment of the present invention, information is secured by associating a context in which the information was generated, for example. To access the secured information, a user provides a point in time and a user identifier, which are used to determine whether that user is authorized to access the information.
Claims28
A method for securing information within a computing system, the method comprising:
- identifying, using an applications server computer, a first entity associated with data representing at least a portion of transactional information;
- retrieving, with the applications server computer, a first context associated with the first entity from a context table database, the first context having a first valid time period, the first context identifying a first subset of the at least a portion of transactional information that was generated during the first valid time period;
- identifying, with the applications server computer, a second entity having a relationship to the first entity;
- retrieving, with the applications server computer, a second context associated with the second entity from the context table database, the second context having a second valid time period, the second valid time period identifying a period of time the relationship is effective;
- determining, with the applications server computer, a second subset of the first subset, the second subset identifying the at least a portion of transactional information that was generated during the second valid time period;
- authorizing, with the applications server computer, access by the second entity to the second subset of data at any point in time, independent of the first valid time period or second valid time period;
- authorizing, with the applications server computer, access by the second entity to the first subset of data during the second valid time period;
- and
- denying, with the applications server computer, access to portions of the first subset of data that are not included in the second subset of data during periods outside of the second valid time period.
A method for securing information within a computing system, the method comprising:
- identifying a first entity associated with data representing at least a portion of transactional information;
- retrieving a first context associated with the first entity from a context table database, the first context having a first valid time period, the first context identifying a first subset of the at least a portion of transactional information that was generated during the first valid time period;
- identifying a second entity having a relationship to the first entity;
- retrieving a second context associated with the second entity from the context table database, the second context having a second valid time period, the second valid time period identifying a period of time the relationship is effective;
- determining a second subset of the first subset, the second subset identifying the at least a portion of transactional information that was generated during the second valid time period;
- and
- authorizing access by the second entity to the second subset of data at any point in time, independent of the first valid time period or second valid time period,
- wherein the first entity and the second entity are identified as having a first role and a second role, respectively, wherein the relationship is defined at least by the first role and the second role.
A method for accessing a secured computer system by a user, the method comprising:
- accepting via a user interface at least one input signal representing a user identifier associated with the user;
- accepting via the user interface at least another input signal representing a point in time;
- retrieving a first context from a context table database, the first context associated with the user identifier at the point in time;
- identifying one or more subsets of data associated with the first context, each subset of data representing at least a portion of transactional information;
- and
- providing to the user the one or more subsets of data at another point in time unrelated to the point in time.
A system for securing information comprising:
- means for identifying a first entity associated with data representing at least a portion of transactional information;
- means for retrieving a first context associated with the first entity from a context table database, the first context having a first valid time period, the first context identifying a first subset of the at least a portion of transactional information that was generated during the first valid time period;
- means for identifying a second entity having a relationship to the first entity;
- means for retrieving a second context associated with the second entity from the context table database, the second context having a second valid time period, the second valid time period identifying a period of time the relationship is effective;
- means for determining a second subset of the first subset, the second subset identifying the at least a portion of transactional information that was generated during the second valid time period;
- and
- means for authorizing access by the second entity to the second subset of data at any point in time, independent of the first valid time period or second valid time period.
An apparatus for securing information comprising:
- a server system configured for identifying a first entity associated with data representing at least a portion of transactional information;
- the server system further configured for retrieving a first context associated with the first entity from a context table database, the first context having a first valid time period, the first context identifying a first subset of the at least a portion of transactional information that was generated during the first valid time period;
- the server system further configured for identifying a second entity having a relationship to the first entity;
- the server system further configured for retrieving a second context associated with the second entity from the context table database, the second context having a second valid time period, the second valid time period identifying a period of time the relationship is effective;
- the server system further configured for determining a second subset of the first subset, the second subset identifying the at least a portion of transactional information that was generated during the second valid time period;
- and
- the server system further configured for authorizing access by the second entity to the second subset of data at any point in time, independent of the first valid time period or second valid time period;
- the server system further configured for authorizing access by the second entity to the first subset of data during the second valid time period;
- and
- the server system further configured for denying access to portions of the first subset of data that are not included in the second subset of data during periods outside of the second valid time period.
A non-transitory computer readable medium containing programming code which when executed by a computing system causes the computing system to:
- identify a first entity associated with data representing at least a portion of transactional information;
- retrieve a first context associated with the first entity from a context table database, the first context having a first valid time period, the first context identifying a first subset of the at least a portion of transactional information that was generated during the first valid time period;
- identify a second entity having a relationship to the first entity;
- retrieve a second context associated with the second entity from the context table database, the second context having a second valid time period, the second valid time period identifying a period of time the relationship is effective;
- determine a second subset of the first subset, the second subset identifying the at least a portion of transactional information that was generated during the second valid time period;
- and
- authorize access by the second entity to the second subset of data at any point in time, independent of the first valid time period or second valid time period;
- authorize access by the second entity to the first subset of data during the second valid time period;
- and
- deny access to portions of the first subset of data that are not included in the second subset of data during periods outside of the second valid time period.
A non-transitory computer readable medium containing programming code which when executed by a computing system causes the computing system to:
- accept via a user interface at least one input signal representing a user identifier associated with the user;
- accept via a user interface at least another input signal representing a point in time;
- identify one or more subsets of data associated with both the point in time and the user identifier, each subset of data representing at least a portion of transactional information;
- and
- provide to the user the one or more subsets of data at another point in time unrelated to the one or more subsets;
- and
- deny the user access to transactional information that is not associated with the user identifier or the point in time.
Dependencies are inferred from the claim text.