Auditing database access in a distributed medical computing environment
First Claim
Patent Images
1. A method of auditing database access in a distributed medical computing environment, the method comprising:
- receiving, by an audit manager responsive to a user query of one or more databases within the distributed medical computing environment, results of the query;
determining by the audit manager, in dependence upon audit policies for the medical computing environment, whether any portion of the results of the query smaller than the entire results of the query require auditing access before presenting to the user, any portions of the results of the query to the user, the audit policies specifying one of several actions to take in response to one or more conditions, the one or more conditions including presence of one or more specific fields and absence of one or more specific fields in the results of the query; and
in response to a determination that any portion of the results of the query require auditing access;
storing an audit record in an audit database, wherein the audit record comprises data identifying the query, the user from which the query is received, and the portions of the query results that caused the results to require auditing access, wherein the audit database only includes audit records,transmitting the audit record to a predetermined auditing facility to be stored, andwithholding, from the user, the portions of the results of the query requiring auditing access by redacting the portions of the results of the query requiring auditing access and presenting certain portions of the results of the query anonymously to the user; and
providing a notification of the query if any portion of the results of the query require auditing access, wherein the notification is a message sent to a predetermined location designated for auditing database queries.
2 Assignments
0 Petitions
Accused Products
Abstract
Auditing database access in a distributed medical computing environment may include receiving from a user a query of one or more databases within the distributed medical administration computing environment; determining by an audit manager in dependence upon audit policies for the medical computing environment whether any of the results of the query require auditing access; and if any of the results of the query require auditing access, creating an audit record and storing the audit record in an audit database.
98 Citations
12 Claims
-
1. A method of auditing database access in a distributed medical computing environment, the method comprising:
-
receiving, by an audit manager responsive to a user query of one or more databases within the distributed medical computing environment, results of the query; determining by the audit manager, in dependence upon audit policies for the medical computing environment, whether any portion of the results of the query smaller than the entire results of the query require auditing access before presenting to the user, any portions of the results of the query to the user, the audit policies specifying one of several actions to take in response to one or more conditions, the one or more conditions including presence of one or more specific fields and absence of one or more specific fields in the results of the query; and in response to a determination that any portion of the results of the query require auditing access; storing an audit record in an audit database, wherein the audit record comprises data identifying the query, the user from which the query is received, and the portions of the query results that caused the results to require auditing access, wherein the audit database only includes audit records, transmitting the audit record to a predetermined auditing facility to be stored, and withholding, from the user, the portions of the results of the query requiring auditing access by redacting the portions of the results of the query requiring auditing access and presenting certain portions of the results of the query anonymously to the user; and providing a notification of the query if any portion of the results of the query require auditing access, wherein the notification is a message sent to a predetermined location designated for auditing database queries. - View Dependent Claims (2, 3, 4)
-
-
5. A system for auditing database access in a distributed medical computing environment, the system comprising one or more computer processors and computer memory coupled to the computer processors, the computer memory including computer program instructions that, when executed by the computer processor, cause the system to carry out the steps of:
-
receiving, by an audit manager responsive to a user query of one or more databases within the distributed medical computing environment, results of the query; determining by the audit manager, in dependence upon audit policies for the medical computing environment, whether any portion of the results of the query smaller than the entire results of the query require auditing access before presenting to the user, any portions of the results of the query to the user, the audit policies specifying one of several actions to take in response to one or more conditions, the one or more conditions including presence of one or more specific fields and absence of one or more specific fields in the results of the query; and in response to a determination that any portion of the results of the query require auditing access; storing an audit record in an audit database, wherein the audit record comprises data identifying the query, the user from which the query is received, and the portions of the query results that caused the results to require auditing access, wherein the audit database only includes audit records, transmitting the audit record to a predetermined auditing facility to be stored, and withholding, from the user, the portions of the results of the query requiring auditing access by redacting the portions of the results of the query requiring auditing access and presenting certain portions of the results of the query anonymously to the user; and providing a notification of the query if any portion of the results of the query require auditing access, wherein the notification is a message sent to a predetermined location designated for auditing database queries. - View Dependent Claims (6, 7, 8)
-
-
9. A computer program product for auditing database access in a distributed medical computing environment, the computer program product disposed upon a non-transitory computer readable storage medium, the computer program product comprising computer program instructions that, when executed, cause a computer to carry out the steps of:
-
receiving, by an audit manager responsive to a user query of one or more databases within the distributed medical computing environment, results of the query; determining by the audit manager, in dependence upon audit policies for the medical computing environment, whether any portion of the results of the query smaller than the entire results of the query require auditing access before presenting to the user, any portions of the results of the query to the user, the audit policies specifying one of several actions to take in response to one or more conditions, the one or more conditions including presence of one or more specific fields and absence of one or more specific fields in the results of the query; and in response to a determination that any portion of the results of the query require auditing access; storing an audit record in an audit database, wherein the audit record comprises data identifying the query, the user from which the query is received, and the portions of the query results that caused the results to require auditing access, wherein the audit database only includes audit records, transmitting the audit record to a predetermined auditing facility to be stored, and withholding, from the user, the portions of the results of the query requiring auditing access by redacting the portions of the results of the query requiring auditing access and presenting certain portions of the results of the query anonymously to the user; and providing a notification of the query if any portion of the results of the query require auditing access, wherein the notification is a message sent to a predetermined location designated for auditing database queries. - View Dependent Claims (10, 11, 12)
-
Specification