Method and system for person data authentication and management

• US 20030105762A1
• Filed: 11/19/2001
• Published: 06/05/2003
• Est. Priority Date: 11/19/2001
• Status: Active Grant

• Current Assignee: FCA US LLC (Stellantis NV)
• Original Assignee: Daimler Chrysler Corporation (Mercedes-Benz Group AG)
• Inventors: Napoleon, Joseph, Root, Anne, Loving, Melissa, McCaffrey, Mary Ellen
• Granted Patent: US 7,080,403 B2
• Time in Patent Office: Days
• US Class Current: 707/10
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: Y10S 707/99932 Access augmentation or optimizing
• CPC Class Codes: Y10S 707/99933 Query processing, i.e. searching
• CPC Class Codes: Y10S 707/99935 Query augmenting and refining, e.g. inexact access
• CPC Class Codes: Y10S 707/99939 Privileged access

Abstract

A person authentication system for authenticating core person data to a plurality of unrelated database systems and virtually linking the plurality of unrelated database systems thus creating a person data repository is provided. A controller module is connected to the person data repository for applying business rules to the input and modification of the core person data. An access control module connected between a user interface of any one of the plurality of unrelated databases systems and the controller module monitors for the input, query or modification of core person data and imposes the business rules on any input, query or modification of the core person data. An authentication module connected to the controller module authenticates as unique the addition of a person to the person data repository.

Claims

1. A computer-implemented system for virtually linking a plurality of unrelated database systems, authenticating core person data input into said plurality of unrelated database systems, and managing through business rules said core person data, the system comprising:

a person data repository for storing the core person data for all persons requiring visibility in any one of said plurality of unrelated database systems wherein said core person data comprises a person name and birth date identifier;

a controller module connected to said person data repository and arranged to apply a set of business rules for restricting access, input, and modification of said core person data by said plurality of unrelated database systems;

an access control module connected between a user interface of any one of said plurality of unrelated database systems and said controller module wherein said access control module monitors said user interface for input, querying or modification of said core person data and imposes said business rules when an attempt is made to input, query or modify said core person data; and

an authentication module connected to said controller module for authenticating as unique the addition of a person to said core person data by the person name and birth date identifier;

whereby said core person data is authenticated and maintained for said plurality of unrelated database systems as a virtual relational database of the core person data.

2. The apparatus of claim 1 wherein said person data repository comprises a database of said core person data connected to said business rules determinator.

3. The apparatus of claim 1 wherein said person data repository comprises a relational database consisting of a subset of said plurality of unrelated database systems.

4. The apparatus of claim 1 wherein said authentication module utilizes a search algorithm to determine if said person exists in said person data repository wherein said search algorithm attempts to match said person'"'"'s name, birth month and birth day with names and birth data already in the person data repository.

5. The apparatus of claim 4 wherein said search algorithm performs a soundex search of the name of said person.

6. The apparatus of claim 1 wherein said business rules comprise a set of contextual rules for allowing and/or disallowing the access, input, and modification of a component of said person data in said person data repository.

7. The apparatus of claim 1 wherein said access control module comprises a program that is resident in the memory containing said user interface for said plurality of unrelated database systems but is apart from said user interface.

8. The apparatus of claim 1 wherein a system interface is connected to said access control module said system interface creating a gateway between said plurality of unrelated database systems and said person data repository wherein said gateway translates the protocol of said plurality of unrelated database systems to the protocol necessary to access, query and modify said person data repository.

9. The apparatus of claim 8 wherein said gateway is based on the CORBA®

protocol.

10. A method for authenticating person data to a plurality of unrelated database systems comprising a plurality of databases, the method comprising:

providing a person data repository comprising the person data wherein the person data repository is comprised of a subset of the plurality of databases;

providing a controller module for monitoring a user interface of the plurality of unrelated database systems for a request to input new person data into any one the plurality of unrelated database systems;

providing an access control module comprising business rules for receiving a request to input the new person data from the controller module; and

applying the business rules of the access control module to restrict the input of the new person data into the plurality of databases if the new person data matches the person data existing in the plurality of databases;

whereby the person data is authenticated to the plurality of unrelated database systems.