Back to results
US 8,788,533 B2Granted
Read access logging
AssigneeSap SE
InventorsFrank Brunswig, Jan Hrastnik, Matthias Richter
Life of this patent
Estimating the term…
Abstract
Read access logging is performed by tracing data accesses in all domains. The logged data is traced on metadata level with some additions identifying the exposed data records. All data relevant for read access logging is stored at first in a temporary log, which is later processed, structured, and archived.
Claims14
A computer implemented method for read access logging comprising:
- enabling the read access logging for at least one user and at least one data set;
- receiving an access request from the at least one user via a domain;
- determining a requirement for read access logging for the domain and the at least one user, wherein the requirement is based on business configuration, user settings, and tenant-specific where-used list of relevant business object node attributes;
- saving log data for exposed data from the at least one data set to the at least one user in a fast read log file, wherein the saved log data in the fast read log file comprises a domain model, a list of accessed business object node attributes and corresponding identifications of business object node instances;
- processing the fast read log file into a structured read access log file;
- and
- auditing the structured read access log file.
4 more elements
A computer system for read access logging comprising:
- a processor;
- and
- a memory in communication with the processor, the memory storing instructions related to:
- an enabling module to enable the read access logging for at least one user and at least one data set;
- a receiving module to receive an access request from the at least one user via a domain;
- a determining module to determine a requirement for read access logging for the domain and the at least one user, wherein the requirement is based on business configuration, user settings, and tenant-specific where-used list of relevant business object node attributes;
- a saving module to save log data for exposed data from the at least one data set to the at least one user in a fast read log file, wherein the saved log data in the fast read log file comprises a domain model, a list of accessed business object node attributes and corresponding identifications of business object node instances;
- a processing module to process the fast read log file into a structured read access log file;
- and
- an auditing module to audit the structured read access log file.
7 more elements
An article of manufacture including a non-transitory computer readable storage medium to tangibly store instructions, which when executed by a computer, cause the computer to:
- enable read access logging for at least one user and at least one data set;
- receive an access request from the at least one user via a domain;
- determine a requirement for read access logging for the domain and the at least one user, wherein the requirement is based on business configuration, user settings, and tenant-specific where-used list of relevant business object node attributes;
- save log data for exposed data from the at least one data set to the at least one user in a fast read log file, wherein the saved log data in the fast read log file comprises a domain model, a list of accessed business object node attributes and corresponding identifications of business object node instances;
- process the fast read log file into a structured read access log file;
- and
- audit the structured read access log file.
4 more elements
Dependencies are inferred from the claim text.