System and method for tracking and auditing data access in a network environment
AssigneeDatiphy Inc.
InventorYeejang James Lin
Life of this patent
Estimating the term…
Abstract
A system and method that correlate business transaction in a system and traffic generated from this business transaction in a network back to a user identity that invoked this business transaction and generated subsequent network traffic. The method enables a user to set up rules for tracking the activities in a system and network traffic and these rules can then be user later for monitoring user activities. The user activities, network traffic, and the user identity are correlated and stored in a data-to-business mapping file. This data-to-business mapping file can be used for auditing events in the system.
Claims14
A method for tracking user activities in a network system, comprising the steps of:
- detecting, by a tracking server at an entry point in the network system, a request from a user;
- retrieving, by the tracking server from a storage unit, a rule based on the entry point and the request;
- tracking, by the tracking server, user access information associated with the request according to the rule;
- tracking, by the tracking server, a connection identification between servers associated with the request;
- recording the user access information and the connection identification in a data-to-business mapping file;
- and
- creating a timer for a session identification, wherein when the timer expires the data-to-business mapping file is closed and a new data-to-business mapping file created.
A server for tracking user activities in a network system, comprising:
- a network interface unit for monitoring network traffic;
- an audit policy unit for controlling rules;
- a database tracking unit for database access requests and responses;
- a control unit;
- and a
- storage unit in which a non-transitory computer program is stored, wherein when the non-transitory computer program is executed by the control unit, the server performs the steps of:
- detecting, at an entry point, a request from a user,
- retrieving a rule associated with the request and the entry point,
- tracking user access information associated with the request according to the rule,
- tracking a connection identification between servers in the network system associated with the request,
- recording the user access information and the connection identification in a data-to-business mapping file;
- and
- creating a timer for a session identification, wherein when the timer expires the data-to-business mapping file is closed and a new data-to-business mapping file created.
Dependencies are inferred from the claim text.