US 9,866,565 B2 · Method and apparatus for controlling data permissions

Abstract

Methods and apparatus for controlling data permission are disclosed herein, and embodiments include generating a relational database that includes entity objects, corresponding user identifications and obligatory relationships of corresponding permission information. The obligatory relationships include time interval information. Some methods further include receiving a request to access an entity object, and the access request comprises identification of an accessing user and an accessing timestamp. The method further includes rendering the permission information of the corresponding entity object if the identification of the accessing user is substantially similar to the corresponding identification of the entity object and the accessing timestamp is within the time interval in response to the accessing request.

Claims45

Dependent claims

A method for accessing a database structure, the method comprising:

generating a relational database, the relational database to include a plurality of user identifications, a plurality of identification codes, a plurality of entity objects, a plurality of permission codes, and a plurality of active time intervals, each user identification having an obligatory relationship with an identification code, an entity object, and one or more permission codes, each obligatory relationship having an active time interval;
receiving an access request from a computing device connected to a network to access a first entity object, the access request including a requestor identification and a timestamp of the access request;
determining if the requestor identification is substantially similar to a user identification of the plurality of user identifications;
when the requestor identification is substantially similar to a first user identification, determining if the timestamp of the access request falls within the active time interval associated with the obligatory relationship that includes the first user identification;
and
when the timestamp of the access request falls within the active time interval, granting the access request access to the first entity object.

3 more elements

A method for accessing a database structure, the method comprising:

generating a relational database, the relational database to include a plurality of user identifications, a plurality of identification codes, a plurality of entity objects, a plurality of permission codes, and a plurality of active time intervals, each user identification having an obligatory relationship with an identification code, an entity object, and one or more permission codes, each obligatory relationship having an active time interval;
receiving an access request from a computing device connected to a network to access a first entity object, the access request including a requestor identification and a timestamp of the access request;
determining if the requestor identification is substantially similar to a user identification of the plurality of user identifications;
when the requestor identification is substantially similar to a first user identification, determining if the timestamp of the access request falls within the active time interval associated with the obligatory relationship that includes the first user identification;
and
when the timestamp of the access request falls within the active time interval, granting the access request access to the first entity object,
wherein generating the relational database includes:
generating a first identification code;
allocating a permission code to the first identification code;
determining an associated user identification;
associating the associated user identification with the first identification code;
receiving a selected entity object selected from a set of multiple entity objects;
and
associating the selected entity object with the first identification code as an obligated relation in the relational database.

11 more elements

An apparatus for accessing a database structure, the apparatus comprising:

a relational database, the relational database to include a plurality of user identifications, a plurality of identification codes, a plurality of entity objects, a plurality of permission codes, and a plurality of active time intervals, each user identification having an obligatory relationship with an identification code, an entity object, and one or more permission codes, each obligatory relationship having an active time interval;
a receiver coupled to the relational database to receive an access request to access a first entity object, the access request including a requestor identification and a timestamp of the access request;
and
a processor coupled to the receiver and the relational database, the processor to:
determine if the requestor identification is substantially similar to a user identification of the plurality of user identifications;
when the requestor identification is substantially similar to a first user identification, determine if the timestamp of the access request falls within the active time interval associated with the obligatory relationship that includes the first user identification;
and
when the timestamp of the access request falls within the active time interval, grant the access request access to the first entity object.

5 more elements

An apparatus for accessing a database structure, the apparatus comprising:

a relational database, the relational database to include a plurality of user identifications, a plurality of identification codes, a plurality of entity objects, a plurality of permission codes, and a plurality of active time intervals, each user identification having an obligatory relationship with an identification code, an entity object, and one or more permission codes, each obligatory relationship having an active time interval;
a receiver coupled to the relational database to receive an access request to access a first entity object, the access request including a requestor identification and a timestamp of the access request;
and
a processor coupled to the receiver and the relational database, the processor to:
determine if the requestor identification is substantially similar to a user identification of the plurality of user identifications;
when the requestor identification is substantially similar to a first user identification, determine if the timestamp of the access request falls within the active time interval associated with the obligatory relationship that includes the first user identification;
and
when the timestamp of the access request falls within the active time interval, grant the access request access to the first entity object,
wherein the processor to associate the first user identification with a first identification code, select an entity object for the first user identification;
and associate the selected entity object with the first identification code in the relational database.

7 more elements

A computer program product tangibly embodied in a computer-readable storage device and comprising instructions that when executed by a processor perform a method for accessing a database structure, the method comprising:

generating a relational database, the relational database to include a plurality of user identifications, a plurality of identification codes, a plurality of entity objects, a plurality of permission codes, and a plurality of active time intervals, each user identification having an obligatory relationship with an identification code, an entity object, and one or more permission codes, each obligatory relationship having an active time interval;
receiving an access request from a computing device connected to a network to access a first entity object, the access request including a requestor identification and a timestamp of the access request;
determining if the requestor identification is substantially similar to a user identification of the plurality of user identifications;
when the requestor identification is substantially similar to a first user identification, determining if the timestamp of the access request falls within the active time interval associated with the obligatory relationship that includes the first user identification;
and
when the timestamp of the access request falls within the active time interval, granting the access request access to the first entity object.

3 more elements

generating a relational database, the relational database to include a plurality of user identifications, a plurality of identification codes, a plurality of entity objects, a plurality of permission codes, and a plurality of active time intervals, each user identification having an obligatory relationship with an identification code, an entity object, and one or more permission codes, each obligatory relationship having an active time interval;
receiving an access request from a computing device connected to a network to access a first entity object, the access request including a requestor identification and a timestamp of the access request;
determining if the requestor identification is substantially similar to a user identification of the plurality of user identifications;
when the requestor identification is substantially similar to a first user identification, determining if the timestamp of the access request falls within the active time interval associated with the obligatory relationship that includes the first user identification;
and
when the timestamp of the access request falls within the active time interval, granting the access request access to the first entity object,
wherein generating the relational database includes:
generating a first identification code;
allocating a permission code to the first identification code;
determining an associated user identification;
associating the associated user identification with the first identification code;
receiving a selected entity object selected from a set of multiple entity objects;
and
associating the selected entity object with the first identification code as an obligated relation in the relational database.

11 more elements

Dependencies are inferred from the claim text.

Method and apparatus for controlling data permissions

Life of this patent

Method and apparatus for controlling data permissions

Life of this patent

Abstract

Claims45