Method, system and program product for enabling authorized access and request-initiated translation of data files

• US 20050273455A1
• Filed: 05/13/2005
• Published: 12/08/2005
• Est. Priority Date: 12/05/2000
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Gupta, Sanjay, Chidiac, Ghassan, Palleschi, Giancarlo, Roubiecek, Evan E., Nordyke, Jeff, Rosenthal, Matthew, Betros, Kim, Vimba, Arnie O., Zarnick, Michael
• Granted Patent: US 7,509,319 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/61 taking into account QoS or priority requirements
• CPC Class Codes: Y10S 707/99936 Pattern matching access
• CPC Class Codes: Y10S 707/99939 Privileged access

Abstract

A method, system and computer program product for controlling access to data files stored in a repository is disclosed. The method includes receiving a request for a data file from a requester. The request specifies a data format preference for receiving the data file. The requested data format is different than either of a data format used to create the data file and a data format in which the data file is stored at the time of the request. The method also includes determining if the requester is authorized to access the requested data file and translating the requested data file from a stored data format into the requested data format responsive to receiving the request if the stored format differs from the requested format. The method further includes making the translated data file accessible to the requester if it is determined that the requester is authorized.

Claims

1. A method for providing access to data files stored in a data repository comprising the steps of:

receiving a request for a data file from a requester, the request specifying a data format preference for receiving the data file, the requested data format being different than at least one of a data format used to create the data file and a data format in which the data file is stored at the time of the request;

determining if said requester is authorized to access said requested data file;

translating the requested data file from a stored data format into said requested data format responsive to said receiving of said request from said requester, if said stored format differs from said requested format; and

making said translated data file accessible to said requester if it is determined that said requester is authorized.

2. A method according to claim 1 wherein the repository resides behind a secure firewall, and further including the steps of:

providing a meta data directory outside of said firewall, said meta data directory indicating the contents of the repository; and

providing periodic updates of said meta data directory, said updates reflecting changes to data in the data repository.

3. A method according to claim 1 wherein said determining step further including the step of:

providing an access control element including data indicating whether a requester is to be permitted to access said requested data file.

4. A method according to claim 1 wherein said repository resides behind a secure firewall and wherein said translated data file is retained at a response repository outside of said firewall in response to said request and is accessible from said response repository by any authorized requester.

5. A method according to claim 1 wherein said repository resides behind a secure firewall, the method further comprising the steps of:

providing an access control system outside of said firewall for receiving said request for said data file;

determining via said access control system if the requested data file is stored in the repository; and

passing said request to said repository if said requester is authorized and said requested data file is stored in said repository.

6. A method according to claim 5 wherein said translated data file is retained at a response repository outside of said firewall in response to said request and is accessible from said response repository by any authorized requester.

7. A method according to claim 6 wherein:

said translating step is undertaken at said response repository; and

said translated file retained at said response repository may be further translated based upon requests from said authorized requesters.

8. A method according to claim 7 further including the steps of:

receiving said request at a staging database within said firewall;

determining based on said received request which of said stored data formats is to be used to perform said translating into said requested file format; and

using the results of said determination to retrieve the data file having the determined format from said repository.

9. A method according to claim 8 wherein said access control system includes a response repository and wherein said translated data file is transferred from said staging database to said response repository and retained at the response repository in response to said request.

10. A method according to claim 1 further comprising the steps of:

providing the requester with the status of the fulfillment of the request for the data file; and

providing an indication of stored formats for the requested data file; and

storing a requester'"'"'s format preferences for the requested data file.

11. A program storage device readable by a digital processing apparatus and tangibly embodying a program of instructions executable by the digital processing apparatus to perform method steps for providing access to data files stored in a data repository, the method comprising the steps of:

receiving a request for a data file from a requester, the request specifying a data format preference for receiving the data file, the requested data format being different than at least one of a data format used to create the data file and a data format in which the data file is stored at the time of the request;

determining if said requester is authorized to access said requested data file;

translating the requested data file from a stored data format into said requested data format responsive to said receiving of said request from said requester, if said stored format differs from said requested format; and

making said translated data file accessible to said requester if it is determined that said requester is authorized.

12. A program storage device according to claim 11 wherein the repository resides behind a secure firewall, and further including the steps of:

providing a meta data directory outside of said firewall, said meta data directory indicating the contents of the repository; and

providing periodic updates of said meta data directory, said updates reflecting changes to data in the data repository.

13. A program storage device according to claim 11 wherein said determining step further including the step of:

providing an access control element including data indicating whether a requester is to be permitted to access said requested data file.

14. A program storage device according to claim 11 wherein said repository resides behind a secure firewall and wherein said translated data file is retained at a response repository outside of said firewall in response to said request and is accessible from said response repository by any authorized requester.

15. A program storage device according to claim 11 wherein said repository resides behind a secure firewall, the method further comprising the steps of:

providing an access control system outside of said firewall for receiving said request for said data file;

determining via said access control system if the requested data file is stored in the repository; and

passing said request to said repository if said requester is authorized and said requested data file is stored in said repository.

16. A program storage device according to claim 15 wherein said translated data file is retained at a response repository outside of said firewall in response to said request and is accessible from said response repository by any authorized requester.

17. A program storage device according to claim 16 wherein:

said translating step is undertaken at said response repository; and

said translated file retained at said response repository may be further translated based upon requests from said authorized requesters.

18. A program storage device according to claim 17 further including the steps of:

receiving said request at a staging database within said firewall;

determining based on said received request which of said stored data formats is to be used to perform said translating into said requested file format; and

using the results of said determination to retrieve the data file having the determined format from said repository.

19. A program storage device according to claim 18 wherein said access control system includes a response repository and wherein said translated data file is transferred from said staging database to said response repository and retained at the response repository in response to said request.

20. A program storage device according to claim 11 further comprising the steps of:

providing the requester with the status of the fulfillment of the request for the data file; and

providing an indication of stored formats for the requested data file; and

storing a requester'"'"'s format preferences for the requested data file.