SYSTEM AND PROGRAM PRODUCT FOR ASSOCIATING EVENT CATEGORIZATION AND ROUTING WITH SECURITY AUTHORIZATION ROLES

• US 20080320563A1
• Filed: 09/04/2008
• Published: 12/25/2008
• Est. Priority Date: 03/25/2004
• Status: Abandoned Application

• Current Assignee: Carlos Cesar F. Araujo, Denilson Nastacio, Jason H. Cornpropst, John E. Dinger, Kevin A. Kizer
• Original Assignee: Carlos Cesar F. Araujo, Denilson Nastacio, Jason H. Cornpropst, John E. Dinger, Kevin A. Kizer
• Inventors: Nastacio, Denilson, Dinger, John E., Cornpropst, Jason H., Araujo, Carlos Cesar F., Kizer, Kevin A.
• Application Number:
  US12/204,441
• Publication Number:
  US 20080320563A1
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 63/101 Access control lists [ACL]

Abstract

Under the present invention, when an event is received on a server, it is stored and then categorized. In being categorized, an event group pertaining to the event is identified. Based on the group of events, a set (e.g., one or more) of destinations to which the event should be routed can be determined. The group of events is then associated with an access control list (ACL) that contains entries identifying users (or groups of users) and their permissions to interact with events in that group. Once the association is made, the event and optionally the ACL is routed to the appropriate destinations. Based on the permissions contained in the ACL, the destinations will interact with the event accordingly.

Claims

1. A system for associating event categorization and routing with security authorization roles, comprising:

an event reception system for receiving an event on a server;

a categorization system for categorizing the event by identifying an event group pertaining to the event;

a destination system for determining a set of destinations associated with the event group for receiving the event; and

a list association system for associating the event group with an access control list (ACL) corresponding to the set of destinations, wherein the ACL includes a set of entries that each identify at least one user and a permission of the at least one user for interacting with the event,

wherein the event is an information technology (IT) event pertaining to a computer system in communication with the server.

2. The system of claim 1, further comprising a routing system for routing the event to the set of destinations after the event group is associated with the ACL.

3. The system of claim 1, wherein the computer system is a client.

4. The system of claim 1, further comprising an event storage system for storing the event on the server.

5. The system of claim 4, further comprising;

a query reception system for receiving a query for the event on the server from a requestor; and

an event retrieval system for retrieving the event from storage, wherein the event and the ACL associated with the event group are routed to the requestor.

6. The system of claim 1, wherein the event group has a group name, a group description and a selector expression.

7. The system of claim 6, wherein the list association system associates the group name of the event group with a list name of the ACL.

8. A program product stored on a recordable medium for associating event categorization and routing with security authorization roles, which when executed, comprises:

program code for receiving an event on a server;

program code for categorizing the event by identifying an event group pertaining to the event;

program code for determining a set of destinations associated with the event group for receiving the event; and

program code for associating the event group with an access control list (ACL) corresponding to the set of destinations, wherein the ACL includes a set of entries that each identify at least one user and a permission of the at least one user for interacting with the event,

wherein the event is an information technology (IT) event pertaining to a computer system in communication with the server.

9. The program product of claim 8, further comprising program code for routing the event to the set of destinations after the event group is associated with the ACL.

10. The program product of claim 8, wherein the computer system is a client.

11. The program product of claim 8, further comprising program code for storing the event on the server.

12. The program product of claim 11, further comprising;

program code for receiving a query for the event on the server from a requestor; and

program code for retrieving the event from storage, wherein the event and the ACL associated with the event group are routed to the requester.

13. The program product of claim 8, wherein the event group has a group name, a group description and a selector expression.

14. The program product of claim 13, wherein the program code for associating associates the group name of the event group with a list name of the ACL.