SYSTEM AND METHOD FOR MONITORING AND ENSURING DATA INTEGRITY IN AN ENTERPRISE SECURITY SYSTEM

• US 20060075488A1
• Filed: 10/04/2004
• Published: 04/06/2006
• Est. Priority Date: 10/04/2004
• Status: Active Grant

• Current Assignee: Liberty Peak Ventures, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: American Express Travel Related Services Company, Inc. (American Express Company)
• Inventors: Plummer, Michael, Barrett, Michael R.
• Granted Patent: US 7,421,739 B2
• Time in Patent Office: Days
• US Class Current: 726/22
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices

Abstract

The invention facilitates monitoring and ensuring data security in security update information between software and hardware applications. The invention is achieved through an automated system that allows for substantial uniformity and substantially seamless security through a front-end system. The invention may use one or more third-party products to facilitate communication between computing platforms.

Claims

1. A method for facilitating changes to security systems, said method including:

detecting a back-end security update in a back-end database;

comparing said back-end security update to front-end security information stored on a front-end database; and

reconstructing said back-end database to conform to said front-end database.

2. The method according to claim 1, further comprising the step of filtering back-end database information.

3. The method according to claim 2, wherein said step of filtering back-end database information includes employing naming conventions.

4. The method according to claim 1, further comprising the step of transferring information from said back-end database to said front-end database.

5. The method according to claim 1, wherein said back-end security update is a RACF update.

6. The method according to claim 1, wherein said back-end security update is a TPF update.

7. The method according to claim 1, wherein said back-end security update is a CA-ACF2 update.

8. The method according to claim 1, wherein said back-end security update is a LDAP update.

9. The method according to claim 1, wherein said step of reconstructing further includes at least one of the steps of:

matching information stored on a back-end database to information stored on a front-end database, generating a counteracting command sequence, transferring said command sequence from a front-end system to a back-end system, and executing said command system.

10. A security system including:

a device configured to detect a back-end security update on a back-end database;

a device configured to compare said back-end security update to front-end security information stored on a front-end database; and

a device configured to reconstruct said back-end database to conform it to said front-end database.

11. The system according to claim 10, wherein said devices are configured to operate in one of a real time and batch processing mode.

12. The system of claim 10, wherein said front-end database includes two or more data tables.

13. The system of claim 10, wherein said device configured to detect said back-end security update is further configured to filter back-end update information.

14. A method for facilitating changes to security systems, said method including:

sending a back-end update from a local back-end system to a front-end database;

detecting said back-end update on said front-end database;

formatting said back-end security update to create an update command; and

transferring said update command to a remote back-end system.

15. The method of claim 14, wherein said step of formatting includes assigning a destination to said update command.