System and method for configuring and viewing audit trails in an information network

• US 20070192478A1
• Filed: 09/25/2001
• Published: 08/16/2007
• Est. Priority Date: 09/25/2001
• Status: Active Grant

• Current Assignee: Oracle America, Inc. (Oracle Corporation)
• Original Assignee: Siebel Systems Inc. (Oracle Corporation)
• Inventors: Yu, Jai-Jein, Wu, Deming, Louie, David
• Granted Patent: US 7,574,501 B2
• Time in Patent Office: Days
• US Class Current: 709/224
• CPC Class Codes: G06Q 10/06 Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
• CPC Class Codes: Y10S 707/99931 Database or file accessing

Abstract

An audit trail system allows a user to configure and view an audit trail of changes that have been made to various types of information that can be accessed by one or more users in a network of computer systems. The various types of information are grouped in business components. A user can select particular business components, and fields within a business component, to be audited. The audit trail shows who has accessed the business component, the operation performed, when the operation was performed, and how the value of at least a portion of the business component was changed. Users can track when operations such as update, create, delete, and copy are performed on the selected business components, as well as track which employee modified a certain field and the data that has been changed. Users can also reconstruct records that existed at a certain point of time. Options to restrict access to audit trails by selected areas of responsibility, positions, and/or employee identifiers, can also be included. Audit trails can be written to one or more local files and periodically imported into a central database.

Claims

1. An apparatus comprising:

an application program comprising

one or more business components, wherein a business component comprises one or more fields corresponding to records in a database separate from the application program,

means for selecting a business component to be audited from the one or more business components,

means for selecting one or more selected operations on the business component to be audited, and

means for creating an audit trail for the application program,

means for providing the audit trail to the database associated with the fields of the business component.

2. The apparatus of claim 1, wherein the application program further comprises:

means for detecting when the selected operations are performed.

3. The apparatus of claim 2, wherein the application program further comprises:

means for generating an audit transaction record regarding the business component when the selected operations are detected.

4. The apparatus of claim 1, wherein the selected operations include at least one of:

update, add, copy, and delete.

5. The apparatus of claim 1, further comprising means for restricting access to the audit trail by at least one of:

an employee identifier, an employment position, and an area of responsibility.

6. The apparatus of claim 3, further comprising means for storing the audit transaction record in an external database.

7. The apparatus of claim 3, further comprising means for storing the audit transaction record in a file.

8. The apparatus of claim 7, wherein the means for providing the audit trail comprising means for importing the audit transaction record stored in the file to the database.

9. The apparatus of claim 3, wherein the audit transaction record includes at least one of:

an identifier for the entity that accessed the business component, the operation that was performed on the business component, when the operation was performed, and how the value of at least a portion of the business component was changed.

10. The apparatus of claim 3, further comprising means for querying one or more of the audit transaction records.

11. The apparatus of claim 2, further comprising means for prompting the user to enter a comment when the selected operations are detected.

12. The apparatus of claim 1, wherein the one or more business components further comprise one or more fields, and the apparatus further comprising:

means for selecting a selected field of the one or more fields to be audited; and

means for generating an audit transaction record when one of the selected operations on the selected field is detected.

13. The apparatus of claim 12, further comprising means for restoring the selected field to a previous state.

14. A system comprising:

a processor; and

a memory coupled to the processor and storing

a first set of instructions, executable by the processor, configured to provide a business component, wherein

the business component comprises one or more fields corresponding to records in a database separate from the application program

a second set of instructions, executable by the processor, configured to provide a user interface, wherein

the user interface is configured to allow selection of a selected field of the one or more fields and one or more selected operations to be audited on the selected field,

a third set of instructions, executable by the processor, configured to detect when the selected operations are performed on the selected field,

a fourth set of instructions, executable by the processor, configured to generate an audit transaction record regarding the selected field when the selected operations are detected, and

a fifth set of instructions, executable by the processor, configured to provide the audit transaction record to the database associated with the fields of the business component.

15. The system of claim 14, wherein the selected operations to be audited include at least one of:

update, add, copy, and delete.

16. The system of claim 14, wherein the second set of instructions are further configured to allow the user to restrict access to an audit trail by at least one of:

an employee identifier, an employment position, and an area of responsibility.

18. The system of claim 14, wherein the memory further stores a sixth set of instructions, executable by the processor, configured to store the audit transaction record in a file.

19. The system of claim 18, wherein the memory further stores a seventh set of instructions, executable by the processor, configured to import the audit transaction record stored in the file to the database.

20. The system of claim 14, wherein the audit transaction record includes at least one of:

an identifier for the entity that accessed the field, the operation that was performed, when the operation was performed, and a previous value of the field, and a current value of the field.

21. The system of claim 14, wherein the memory further stores a sixth set of instructions, executable by the processor, configured to allow the user to query one or more of the audit transaction records.

22. The system of claim 14, wherein the memory further stores a sixth set of instructions, executable by the processor, configured to allow the user to restore one or more of the selected fields to a previous value.

23. The system of claim 14, wherein the memory further stores a sixth set of instructions, executable by the processor, configured to prompt the user to enter a description of the operation when the selected operations are detected.

17. canceled

24. A method comprising:

auditing an application program wherein said auditing comprises creating an audit trail; and

using the application program to perform audit trail functions comprising

generating a list of business components included in the application program, wherein

a business component of the list of business components comprises one or more fields corresponding, to records in a database separate from the application program

presenting the list of business components to a user,

allowing the user to select a selected business component to be audited,

presenting a list of operations that can be performed on the selected business component to the user,

allowing the user to select one or more selected operations to be audited for the selected business component, and

providing the audit trail to the database associated with the fields of the business component.

25. The method of claim 24, wherein the list of operations include at least one of:

update, add, copy, and delete.

26. The method of claim 24, further comprising restricting access to the audit trail by at least one of:

an employee identifier, an employment position, and an area of responsibility.

27. The method of claim 24, further comprising:

detecting when the selected operations are performed on the selected business component; and

generating an audit transaction record when the selected operations are detected.

28. The method of claim 27, wherein said providing the audit trail comprises storing the audit transaction record in the database.

29. The method of claim 27, further comprising storing the audit transaction record in a file.

30. The method of claim 29, wherein said providing the audit trail comprises importing the audit transaction record stored in the file to a database.

31. The method of claim 27, wherein the audit transaction record includes at least one of:

an identifier for the entity that accessed the business component, the operation that was performed on the business component, when the operation was performed, and how the value of at least a portion of the business component was changed.

32. The method of claim 27, further comprising querying one or more of the audit transaction records.

33. The method of claim 27, further comprising prompting the user to enter a description of the operation when the selected operations are detected.

34. The method of claim 24, wherein the selected business component further comprises one or more fields, and the method further comprising:

selecting a selected field of the one or more fields to be audited; and

generating an audit transaction record when the selected operations on the selected field are detected.

35. The method of claim 34, further comprising restoring one or more of the selected fields to a previous value.

36. A computer-readable storage medium comprising:

instructions for implementing the method of claim 24.

37. canceled