System and method for preserving causality of audits

• US 10,320,878 B2
• Filed: 06/04/2015
• Issued: 06/11/2019
• Est. Priority Date: 10/14/2013
• Status: Active Grant

• Current Assignee: Medidata Solutions Incorporated (Dassault Systemes SA)
• Original Assignee: Medidata Solutions Incorporated (Dassault Systemes SA)
• Inventors: Weiner, Aaron, Szenher, Matthew, Carroll, Nolan, Wong, Isaac
• Primary Examiner(s): Tomaszewski, Michael
• Application Number:
  US14/731,123
• Publication Number:
  US 20150269326A1
• Time in Patent Office: 1,468 Days
• Field of Search: None
• CPC Class Codes: G06F 16/273 Asynchronous replication or reconciliation
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G16H 10/20 for electronic clinical trials or questionnaires
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]

Abstract

A system for preserving causality of audits may include an upstream service, a downstream service, and an audit service. The upstream service receives a first request including a trace ID and a first span ID, generates a first audit concerning a resource owned by the upstream service and having the trace ID and the first span ID as metadata, persists the first audit to a first database, and generates a second request including the trace ID, a parent span ID, and a second span ID. The downstream service receives the second request from the upstream service, generates a second audit concerning a resource owned by the downstream service and having the trace ID, second span ID, and parent span ID as metadata, and persists the second audit to a second database. The audit service receives and asynchronously centralizes the first and second audits. The metadata can be used to infer causality of the audits. A method for preserving causality of audits is also disclosed and claimed.

Claims

1. A unified clinical system for determining causality of audits, comprising:

a clinical study web service that receives a first HTTP request including a trace ID and a first span ID, generates a first audit concerning a resource owned by said clinical study web service and having the trace ID and the first span ID as metadata, persists the first audit to a study database, and generates a second HTTP request including the trace ID, a parent span ID, and a second span ID;

an authorization web service that receives the second HTTP request from the clinical study web service, generates a second audit concerning a resource owned by said authorization web service and having the trace ID, second span ID, and parent span ID as metadata, and persists the second audit to an authorization database; and

an audit service for receiving and asynchronously centralizing the first and second audits, wherein the trace ID, first and second span IDs, and parent span ID are used to determine causality.

2. The system of claim 1, wherein the clinical study web service converts the first span ID to the parent span ID and generates the second span ID.

3. The system of claim 1, further comprising a logging service for logging the first and second HTTP requests.

4. The system of claim 1, wherein the resource owned by the clinical study web service is a clinical study.

5. The system of claim 1, wherein the resource owned by the authorization web service is an authorization.

6. The system of claim 1, further comprising a front-end process that generates the trace ID, first span ID, and first HTTP request.

7. The system of claim 1, further comprising a study optimization service that receives an HTTP request from the authorization web service, generates a third audit concerning a resource owned by said study optimization service and having the trace ID, a third span ID, and a second parent span ID as metadata, and persists the third audit to a study optimization database.

8. The system of claim 7, wherein the audit service receives and asynchronously centralizes the third audit.

9. The system of claim 1, further comprising a study optimization service that receives an HTTP request from the clinical study web service, generates a third audit concerning a resource owned by said study optimization service and having the trace ID, a third span ID, and the parent span ID as metadata, and persists the third audit to a study optimization database.

10. The system of claim 1, wherein the first audit is based on an audit exported from a clinical device.

11. The system of claim 1, wherein the first audit is based on an audit from a workflow service.