Method and Apparatus for Controlling Access to Liability Exposure Data

• US 20090144067A1
• Filed: 11/30/2007
• Published: 06/04/2009
• Est. Priority Date: 11/30/2007
• Status: Abandoned Application

• Current Assignee: Guidewire Software Incorporated
• Original Assignee: Guidewire Software Incorporated
• Inventors: Keefer, Alan Harrison
• Application Number:
  US11/948,733
• Publication Number:
  US 20090144067A1
• Time in Patent Office: Days
• US Class Current: 705/32
• CPC Class Codes: G06Q 10/00 Administration; Management
• CPC Class Codes: G06Q 40/08 Insurance
• CPC Class Codes: G06Q 50/00 Information and communication technology [ICT] specially adapted for implementation of business processes of specific business sectors, e.g. utilities or tourism healthcare informatics G16H

Abstract

A computer-based processing system for use in controlling access to liability exposure data contains input received from an end user. The end user declares a plurality of exposure security levels that are associated with particular liability exposure data. A permission is declared for a user and the permission is mapped to the exposure security level. Upon an attempt to access the particular liability exposure data, the system then automatically verifies whether the user attempting to access the data has the permission required to access the exposure security level correlating to the particular liability exposure data.

Claims

1. A method for controlling access to liability exposure data in a computer-based processing system, the method comprising:

in the computer-based processing system;

receiving input from an end user declaring a plurality of exposure security levels to provide declared exposure security levels and associating the declared exposure security levels to corresponding particular liability exposure data;

receiving input from the end user declaring at least one permission for a first user;

mapping the at least one permission to at least one of the declared exposure security levels;

upon an attempting user'"'"'s attempt to access the particular liability exposure data, automatically verifying whether the attempting user has the at least one permission required to access the mapped exposure security level as correlates to the particular liability exposure data.

2. The method of claim 1 wherein if the attempting user has the at least one permission required to access the mapped exposure security level correlating to the particular liability exposure data, granting the attempting user access to the particular liability exposure data.

3. The method of claim 1 wherein if the attempting user lacks the at least one permission required to access the mapped exposure security level correlating to the particular liability data, denying the attempting user access to the particular liability exposure data.

4. A method for use with a computer-based processing system having a user interface, the computer-based processing system for use in managing incident-related work, wherein the incident-related work is associated with a plurality of liability exposures, the method comprising:

in the computer-based processing system;

storing in memory;

a list of exposure security levels declared by an end user wherein at least some of the exposure security levels are associated with at least one corresponding one of the plurality of liability exposures;

a list of permissions declared by an end user, the list of permissions having been associated with at least one user and wherein individual permissions are correlated with exposure security levels;

controlling access to a particular one of the liability exposures by automatically evaluating whether a particular user seeking access has a particular one of the permissions required to access, via the user interface, a particular one of the exposure security levels as is associated with the particular one of the liability exposures.

5. The method of claim 4 wherein one of the permissions comprises a fundamental access right to access the liability exposure correlated with the exposure security level.

6. The method of claim 5 wherein other of the permissions comprise supplemental access rights that correspond to specific types of permissions that may be accorded to the at least one user in addition to the fundamental access right.

7. The method of claim 4 wherein the list of exposure security levels comprises a status comprising at least one of:

public;

sensitive;

extremely-sensitive.

8. The method of claim 4 wherein associating the exposure security levels with the plurality of liability exposure occurs by at least at one of:

manual association;

automatic association.

9. The method of claim 4 wherein a plurality of permissions may be associated with the at least one user.

10. The method of claim 4 wherein the particular one of the exposure security levels corresponds to a particular exposure type.

11. An apparatus to facilitate controlling access to liability exposure data in a computer-based processing system, the apparatus comprising:

a user interface;

a memory operably coupled to the user interface and being configured and arranged to store therein;

input received via the user interface from an end user comprising a plurality of declared exposure security levels;

input received via the user interface from the end user comprising at least one permission for a first user;

a processor operably coupled to the user interface and the memory and being configured and arranged to;

map at least one of the declared exposure security levels to the at least one permission to provide a mapped exposure security level;

associate the mapped exposure security level to particular liability exposure data;

automatically verifying whether an attempting user who is attempting to access the particular liability exposure data has the at least one permission required to access the mapped exposure security level as correlates to the particular liability exposure data.

12. The apparatus of claim 11 wherein the processor is further configured and arranged to grant the attempting user access to the particular liability exposure data when the attempting user has the at least one permission required to access the mapped exposure security level correlating to the particular liability exposure data.

13. The apparatus of claim 11 wherein the processor is further configured and arranged to deny the attempting user access to the particular liability exposure data when the attempting user lacks the at least one permission required to access the mapped exposure security level correlating to the particular liability data.