System and method for application-level security

• US 20020062449A1
• Filed: 11/16/2001
• Published: 05/23/2002
• Est. Priority Date: 11/16/2000
• Status: Abandoned Application

• Current Assignee: Pershing Investments, LLC (Bank of New York Mellon Corporation)
• Original Assignee: Pershing Investments, LLC (Bank of New York Mellon Corporation)
• Inventors: Gassman, Lenard, Perna, James De, Galinsky, Izabella
• Application Number:
  US09/988,009
• Publication Number:
  US 20020062449A1
• Time in Patent Office: Days
• US Class Current: 713/200
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices

Abstract

Software applications having a hierarchy of functions, sub-function and sub-sub-functions that are made available to one or more clients. The ability of the clients to utilize the various functionality of the applications is controlled by an application security database system (ASDS) which maintains a database of application function hierarchy and client entitlements. The applications consult with the ASDS to determine whether a client'"'"'s user is authorized to perform a requested function and either performs, or fails to perform, the requested function based on the reply from the ASDS. In particular, rules regarding access to proprietary data associated with different functionality are also maintained by the ASDS. The client entitlements are associated with the end-users of the clients not by user name but, rather, by user roles reflecting the business structure of the client.

Claims