METHOD AND APPARATUS FOR AN IMPROVED SECURITY SYSTEM MECHANISM IN A BUSINESS APPLICATIONS MANAGEMENT SYSTEM PLATFORM

• US 20090192847A1
• Filed: 03/21/2008
• Published: 07/30/2009
• Est. Priority Date: 01/14/2000
• Status: Abandoned Application

• Current Assignee: Saba Software Incorporated
• Original Assignee: Saba Software Incorporated
• Inventors: Mehra, Gaurav, Lipkin, Daniel S.
• Application Number:
  US12/053,436
• Publication Number:
  US 20090192847A1
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6236 between heterogeneous systems
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 9/468 Specific access rights for resources, e.g. using capability register
• CPC Class Codes: G06Q 10/063 Operations research, analysis or management
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: Y10S 707/99931 Database or file accessing
• CPC Class Codes: Y10S 707/99944 Object-oriented database structure

Abstract

The present invention provides a solution to the needs described above through an improved method and apparatus for an improved security system mechanism in a business applications management system platform. The security management system partitions a number of business objects into a number of hierarchical domains. A security list is then created and configured to grant a member the right to perform a security operation on the business object located within the hierarchical domain. The security list is created by adding the security operation to the security list, applying the security operation to one of the multiple domains, and adding members to the security list.

Claims

1. A method for managing security on a business application management platform implemented on a computer, comprising the steps of:

partitioning a plurality of business objects into a plurality of hierarchical domains; and

creating a security list configured to grant a member the right to perform a security operation on said business object located in said hierarchical domain, comprising the steps of;

adding said security operation to said security list;

applying said security operation to one of said plurality of domains; and

adding said member to said security list.