Security control of analysis results
AssigneeInternational Business Machines Corporation
InventorsYunsheng Song, Tso-Hui Ting, Brian M. Trapp
Life of this patent
Estimating the term…
Abstract
A system and a method are provided. The method includes assigning an entity to a ticket group associated with an ID thereof, displaying to the entity reports, which are each organized with an associated security access control, in accordance with the ticket group, determining whether the entity is authorized to access any selected one or more of the reports in accordance with a result of a comparison between an access level associated with the entity ID and the security access control associated with each of the one or more of the stored reports, and granting or denying the access in accordance with the determination.
Claims20
A system to provide security control of analysis results, comprising:
- a memory unit configured to store more than one report in a selected level of a filing system in which each of the more than one stored reports in the selected level of the filing system is associated with a different security access control;
- a networking unit by which an entity submits an entity ID and requests access to one or more of the more than one stored reports by way of a selection from a list of the more than one stored reports, which is displayed to the entity, the list being displayed in accordance with a ticket group to which the entity is assigned and including a listing of reports accessible and non-accessible by the entity;
- a processing unit, coupled to the memory and the networking units and including an analysis security filter configured to grant the entity the requested access when an access level associated with the entity ID corresponds to the security access control associated with each of the one or more of the more than one stored reports;
- and
- a generating unit, coupled to the processing unit and configured to provide the entity with the requested access to those of the one or more of the more than one stored reports where the requested access is granted.
A computer implemented method of granting an entity access to reports, comprising:
- upon a login by the entity, assigning the entity to a ticket group associated with an ID of the entity;
- displaying to the entity a list of reports, which are each organized with an associated security access control within a selected level of a file system, in accordance with the ticket group to which the entity is assigned, the list including a listing of reports accessible and non-accessible by the entity;
- upon a selection of one or more of the reports by the entity, determining whether the entity is authorized to access any of the one or more of the reports in accordance with a match of an access level associated with the entity ID with the security access control associated with each of the one or more of the stored reports;
- and
- granting the access in an event the one or more of the reports selected by the entity from the list of reports has an associated security access control matching the entity ID.
A method of granting an entity access to reports, comprising:
- assigning the entity to a ticket group associated with an ID thereof;
- displaying to the entity a list of reports, which are each organized with an associated security access control, the displaying of the list of reports being in accordance with the ticket group and the list including a listing of reports accessible and non-accessible by the entity;
- determining whether the entity is authorized to access any selected one or more of the reports in the list of reports in accordance with a result of a comparison between an access level associated with the entity ID and the security access control associated with each of the one or more of the stored reports;
- and
- granting or denying the access in an event the one or more of the reports selected by the entity from the list of reports has an associated security access control matching or not matching the entity ID, respectively.
Dependencies are inferred from the claim text.