Data Access Control System for Shared Directories and Other Resources

• US 20080256458A1
• Filed: 03/19/2008
• Published: 10/16/2008
• Est. Priority Date: 04/02/2007
• Status: Abandoned Application

• Current Assignee: Siemens Medical Solutions USA Incorporated (Siemens AG)
• Original Assignee: Siemens Medical Solutions USA Incorporated (Siemens AG)
• Inventors: Aldred, Terrence, Lingenfelter, Bruce
• Application Number:
  US12/051,076
• Publication Number:
  US 20080256458A1
• Time in Patent Office: Days
• US Class Current: 715/741
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes

Abstract

A system manages directory access permissions without help-desk intervention. The system automatically manages user permissions to access processing system resources and includes a user interface providing data representing at least one display image enabling a user to request permission to access a particular processing system resource. A communication processor, in response to detection of a user request for permission to access a particular processing system resource, automatically, acquires a user identifier and user email address, determines an owner responsible for granting permission to access the particular processing system resource and an associated owner email address, emails a request message to the owner email address to grant the access of the user to the particular processing system resource and receives a response email message indicating grant of the access. An access manager, in response to a received grant of the access and updates access data to enable the user to access the particular processing system resource.

Claims

1. A system for automatically managing user permissions to access processing system resources, comprising:

a user interface providing data representing at least one display image enabling a user to request permission to access a particular processing system resource;

a communication processor for, in response to detection of a user request for permission to access a particular processing system resource, automatically,

acquiring data comprising a user identifier and user email address,

determining an owner responsible for granting permission to access said particular processing system resource and an associated owner email address,

emailing a request message to said owner email address to grant said access of said user to said particular processing system resource and

receiving a response email message indicating grant of said access;

an access manager for, in response to a received grant of said access, updating access data to enable said user to access said particular processing system resource.

2. A system according to claim 1, wherein

in response to said communication processor receiving a response email message indicating denial of said access, said access manager inhibits update of said access data to enable said user to access said particular processing system resource and said communication processor automatically emails a message to said user indicating access is denied and identifying said owner.

3. A system according to claim 1, wherein

said at least one display image presents a web site enabling a user to view data indicating available processing system resources and enabling a user to select a specific processing system resource and automatically initiate a request for permission to access said specific processing system resource.

4. A system according to claim 3, wherein

said at least one display image presenting said web site shows available processing system resources categorized by at least one of, (a) server, (b) computer, (c) department, (d) organization and (e) device.

5. A system according to claim 3, wherein

said available processing system resources are provided by at least one of, (a) a particular organization, (b) a particular unit of said organization and (d) a particular organization location.

6. A system according to claim 3, wherein

said available processing system resources are resources available to, (a) said user, (b) a plurality of users of an organization and (c) all users of an organization.

7. A system according to claim 3, wherein

said at least one display image presents a web site enabling a user to view data indicating,

processing system resources available to a plurality of users of an organization and

in response to user command, processing system resources available to said user.

8. A system according to claim 3, wherein

said at least one display image presenting said web site shows data items individually representing a plurality of available processing system resources and in response to user command an image area presents data indicating a plurality of available processing system resources associated with a particular user selected data item.

9. A system according to claim 1, wherein

said at least one display image presents data prompting a user to relinquish permission to access a processing system resource.

10. A system according to claim 1, wherein

said at least one display image enables a user to view data indicating available processing system resources and enables a user to select a specific processing system resource and automatically initiate a request for permission to access said specific processing system resource.

11. A system according to claim 1, wherein

said owner comprises a worker responsible for managing access to processing system resources.

12. A system according to claim 1, wherein

said owner comprises a resource manager system responsible for automatically managing access to processing system resources.

13. A system for automatically managing user permissions to access processing system resources, comprising:

a user interface providing data representing at least one display image enabling a user to view data indicating available processing system resources and enabling a user to select a specific processing system resource and automatically initiate a request for permission to access said specific processing system resource;

a communication processor for, in response to detection of a user request for permission to access a particular processing system resource, automatically,

acquiring data comprising a user identifier and user email address,

determining an owner responsible for granting permission to access said particular processing system resource and an associated owner email address,

emailing a request message to said owner email address to grant said access of said user to said particular processing system resource and

receiving a response email message indicating grant of said access;

an access manager for, in response to said received grant of said access, updating access data to enable said user to access said particular processing system resource.

14. A system according to claim 13, wherein

said at least one display image presents a web site.

15. A system according to claim 13, wherein

said request message to said owner email address includes a link to a web page enabling said owner to review and approve a request to grant access to processing system resources.

16. A system for automatically managing user permissions to access processing system resources, comprising:

a user interface providing data representing at least one display image enabling a user to request permission to access a particular processing system resource;

a communication processor for, in response to detection of a user request for permission to access a particular processing system resource, automatically,

acquiring data comprising a user identifier and user email address,

determining a resource manager system responsible for granting permission to access said particular processing system resource and an associated owner communication address,

communicating a request message to said resource manager system address to grant said access of said user to said particular processing system resource and

receiving a response message indicating grant of said access;

an access manager for, in response to a received grant of said access, updating access data to enable said user to access said particular processing system resource.